ActiveFedora::Base#accessible_by relation to filter results based upon cancan ability and action

It would be nice to push the code for adding fq values into ActiveFedora instead of injecting it here.

I added a pending test to allow for chaining to association relations but there appears to be a bug in ActiveFedora which keeps anything from being able to be chained to association relations.