Added SPEL support to permissions to parse the params map

Permissions can now be specified using a SPEL expression.
For example: @NimbleAuth(role = 'USER', permission = 'entity:action:#{params[\'id\']}')
This expression will result in checking the permission
entity:action:12345 if params.id for the controller is 12345