Add user access checks

Fixes #457. 

Adds access checks to analysi object and uses them in qiita_pet to check that access. Only study and analyses have owners, so now both can be checked using ``instantiated_obj.has_access(user)``.