Add permission view_commit_author_statistics

Also add this permission to all default data roles that have the
view_changesets permission.
Deny access to repository commit author stats for unauthorized users
Don't embed commits per author graph for unauthorized users
Merge pull request #412 from opf/feature/commit_author_statistics_permission

Add permission that allows hiding repository statistics on commits per author