Removed option includePermissions from toJSON

This should be left as responsibility of the application, as needs are
usually custom.
Bump acl version
Release 0.5.1