cancel is not longer handled by state_machine

 * cancel method is not longer declared as a regular state_machine transition,
   but as a custom method which works very similar but with some subtle
   differences
 * new permissions for cancel, so now requesters can cancel already accepted
   requests or reimbursements
Documentation update
Better features specs for reimbursements