Allow to cancel on pull permission

This change allows to cancel build or job while having only pull permission.

This needs deploying to API only, as only API uses cancel service. After enabling it in the API, travis-web also needs to be updated on org and on pro: travis-ci/travis-web#220