Add migration to create edit_fact permission
Initialise then save edit_fact permission

This circumvents protected attributes which prevented the application
association hookup.
Merge remote-tracking branch 'origin/add_edit_fact_permission'