* Add wildcard calc helpers to permissions service with tests
* Check for wildcard access when calculating permissionsBanner
* Move resultant-acl banner within TokenExpireWarning so it's mutually exclusive with token expired banner
* fix permissions banner if statement
* Add margin to resultant-acl
* cleanup comments