* check for capabilities when finding matching paths * disable wizard items that user does not have access to * make hasPermissions accept an array of capabilities * refactor features-selection * fix tests * implement feedback