wrapping controllers in permissions checking
pulling in tests from the other attempt
most controllers have permissions checks, all tests passing
merge with develop
routes and roles
no longer used
merge with develop
ubiquitous permissions
with-permissions is now a handler, unit tests pass again
merge with develop branch
updating for merge