Fix None check for current_user in permissions

• because flask_login.current_user is a local proxy, the check 'current_user is not None' would always return True