Allowed 0 (zero) to be used as a permission code
Middleware now throws if no permissions are given
Istanbul should ignore test files
Middleware tests