add permission checks for viewing messages and their stream associations

issue #175
Merge git://github.com/Graylog2/graylog2-web-interface into develop