Move permissions tests to their own test group.

This moves the permissions tests to their own test group, runs the permissions tests for both the all_perms = Ture and all_perms = False cases and adds permissions tests for embed-apps and open-remote-window.
In line 128, I'm creating my own app.zip using stuff from the file system as well as a file I'm creating in memory that contains the url to post results to. I don't think generate_app supports either of these use cases right now.