Read user permissions from current session user in payment reconciliation

Refresh user permission filters at reconciliation time instead of capturing them at document creation, fixing filters when the session user changes.