Include the request in the Ability constructor to support request specific permissions.