Add test for current behavior of current_user
Move user access check to Gitlab::UserAccess
Check user access status in API for current_user
Make user access test pass for the right reason

If we do not set a private token during the test, current_user will be
nil because the user is not found, not due to the access check.
Add API access checks to CHANGELOG
Merge branch 'api_ldap' into 'master'

Check user access during API calls