fix(controller): disallow unauthorized users from rolling back releases
fix(controller): disallow unauthorized users from rolling back releases

Because we did not check the user's permissions inside the view, a user
who did not have authorization could roll back an application's release
version.

deis/workflow,deis/workflow,deis/workflow