Block reader users access to users forms

Readers users will now only be available of seeing their own edit form.
Fixes #1064

app/controllers/UsersController.java

@@ -107,6 +107,9 @@ public Result show(String username) {
     }
 
     public Result newUserForm() {
+        if (!Permissions.isPermitted(RestPermissions.USERS_CREATE)) {
+            return redirect(routes.StartpageController.redirect());
+        }
         BreadcrumbList bc = breadcrumbs();
         bc.addCrumb("New", routes.UsersController.newUserForm());
 
@@ -130,6 +133,9 @@ public Result newUserForm() {
     }
 
     public Result editUserForm(String username) {
+        if (!Permissions.isPermitted(RestPermissions.USERS_EDIT, username)) {
+            return redirect(routes.StartpageController.redirect());
+        }
         BreadcrumbList bc = breadcrumbs();
         bc.addCrumb("Edit " + username, routes.UsersController.editUserForm(username));