Implemented configurable access denied handling.

* Added config.on_unauthorized_access to the inheritable configurations
  for Active Admin.
* Added a test suite for MethodOrProcHelper
* Implemented default access denied handling for HTML, JSON, and XML