Noticed issue where the HUD wouldn't function as expected and resolved it. Suspected it could be related to a permission issue but ended up not being related; regardless it's still resolved here.
Updated mock security to conduct a POST when logging in rather than the old GET.
Added a maxAge property to cookies in support of the session. This should allow sessions to properly end after a certain period (default 24 hours) rather than relying on the browser closing. The mock security service updates the maxAge on every request but other implementations can choose to change this.
Updated persona's login method to ensure permissions are cached before each login. This should prevent issues in which zero permissions are cached causing users to login without permissions.
Removed old alert message from Ozone.ajax; it was most of a development artifact; now it appropriately returns the error to the caller should an HTTP 403 be returned from the server.
Added minor feedback when saving permissions since I was in the area and it only took a couple of minutes. This should be later improved as far as the user experience goes.
Merge pull request #51 from ozone-development/fixes-14

Addresses issues in 14 (permission instability)