add ability to specify navigation item permission and url by a controller / optional action
update basic application sample with controller based url feature
add NavigationItemAttribute.GetPermissionFromController tests