Do not override permissions if already provided

This allows beforeAnnotationCreated hooks to provide their own
permissions objects.
Merge pull request #75 from hypothesis/allow-permissions

Do not override permissions if already provided