auth: simplify the double invoked auth classes used for permission checking Also avoid storing request state in the Has Permission instances. The instances er temporary and only used once and there is thus not real problem, but it is simpler and cleaner this way.

pytest ~= 3.0
pytest-runner
pytest-sugar>=0.7.0
pytest-catchlog
WebTest<2 # this is also a Pylons dependency and pinned in setup.py to avoid version conflicts for WebOb
mock
sphinx