changed HMRN::Data::hmrn() permissions to require edit_clinical_data as well as view_clinical_data, allowing simplification of HMRN permissions to edit_clinical_data OR view_clinical_data, not both