Implementing StormpathUser.has_perm().

This is only checking for staff / superuser right now, we'll extend this
functionality in the future.