complete expenses feature

* add tests for expenses controller permissions
* add tests for expenses controller: create, edit, update, destroy
* show expenses total in contract details page
* deduct expenses total from amount remaining display (also updates Total Remaining)
* add validation for issue ID (if one is present, make sure it's a valid issue)