Cover unmatched roles case
Fix typo in test name
Add test for denying writers writes to ACL nodes
Confine acl objects to setUp
Use Session rather than JcrSession in AbstractRolesPEP to make mocking easier
Add unit tests for recursive removal
Comment and spacing
Add licence header, fix spacing