Add policy to PaperConversionsController via PapersPolicy

Allow anyone with access to view the paper to be able to export it
Not sure if this is a big deal, but a pattern we've been using lately is using ```authorize_action!(resource: @paper)``` and adding ```primary_resource: paper``` to the policy.