add failing cucumber spec
permissions definition with cancan
generalise the login_as_stub_user test helper
enforce permissions
403 HTTP status code & view for forbidden requests
hide links to forbidden requests
simplication of user stubbing in tests
Merge pull request #57 from alphagov/request_permissions

Request permissions