added various convenience methods and a hack to make #permit idempotent
helpers for kind and mime_type
enable any object with #role or #resource to provide a role id or resource id
formatting
any new record which acts_as_user can provide an api logged-in as that user