Make permissions middleware more idiomatic

Get rid of check equality parameter which would kind of wreck the
principle of hierarchy.
And turn function in a more idiomatic implementation, using
Express's middleware chain system.