Define rights to change contribution state

It is part of neighborly/neighborly-api#36

Note about the removal of `#can_refund?`: I has getting conflict from the state_machine helper and this method.