Implemented abort when accessing a resource without rights

 * implemented TODO abort(403)
 * checked that all read permissions for resource are role based

Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>
added missing dependency in setup for testing

Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>
added test for collection access abort

Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>
Merge pull request #11 from guyzmo/bugfix

Implement abort when accessing a resource without the necessary 'role' permissions