Defined and used permissions

Addresses https://github.com/my-koop/service.website/issues/346 for this module. Really did my best to be thorough and test different combinations of permissions, but I obviously couldn't test all of them.

<!---
@huboard:{"order":302.75,"milestone_order":11,"custom_state":""}
-->

actually it the opposite, public doesn't imply "in the registration page", that route is use to get only mailing in the new user registration page, therefore there has to be another route for GetAvailableMailingList to the requesting user