Behat: add permissions/role check feature/scenarios

fixes #20