Move permissions tests to their own test group.

This moves the permissions tests to their own test group, runs the permissions tests for both the all_perms = Ture and all_perms = False cases and adds permissions tests for embed-apps and open-remote-window.
same thing with generate_app here