Can now register permissions of a controller for display purposes
Fix problem with Model#expose on has_and_belongs_to_many relationships
Access engine now returns list of permissions required on Not Authorized