Allow customization of ACL http status

emulate existing error on 404
new tests for model and app settings
Signed-off-by: Karl Mikkelsen <karl@karlmikko.com>
Merge pull request #306 from karlmikko/master

Ability to return 401 and 403 response codes #301
lib/application: Remove forgotten `loopback` ref

Use `registry.Model` instead of `loopback.Model`.
Merge pull request #330 from strongloop/feature/fix-forgotten-loopback-reference-in-app

lib/application: Remove forgotten `loopback` ref
Merge branch 'master' into 2.0

Conflicts:
	test/access-token.test.js