Validate FieldPermission input on save

model_name and field_name must be valid Authorizables
Fix route function to support positional args
Breakup FieldPermission validation to catch more

As was commented on e7967a3, we shouldn't swallow up the original
exception, it makes debugging harder. Now we catch and provide better error messsages.