Options hash for Rule.

This allows a Rule to carry an options hash, and also sets the matched rule in `CanCan::AccessDenied`, so you can see what rule failed.