Fixed #140. Fixed #142. See #146. Added basic permission check to scans.

In order to allow the backend to verify permission, a user query string is appended. This query string is '?email=<email-address>'. The check is performed by finding {'user': email, 'site': url} in the groups collections. Currently, issue #147 is reported but given our model, #147 is not a security issue. Therefore, by knowing a user (his/her Persona account) belongs to at least one group that contains the target url is sufficent enough to say the user has permission to view the scan or do work on the scan.
Allow admins to see all scan results; improved permission in scans to decorator.

Since the utlimate admin has permission to look at the database record anyway, admins normally should have power to look at all results. This privacy changes might be revoked later if we introduce tigher auth control.
Make permission check optional for /scans* apis.

Once scans are created, we don't need to check permission anymore.
Add permission check to POST /scans.
Fixed #149, fixed #150 and fixed #151. Updated minion-scan script and README.
Fixed #153. Update minion-db-init and minion-create-user to take user real name.

This is built on top of issue #149 and #150.
Place quote around name to group full name together.

If the name supplied has a space (say full name), then the sys.argv will treat the word after space as the role parameter.
Merge pull request #148 from yeukhon/ownership-issues

Add user authorization checks to /scans*
Merge pull request #152 from yeukhon/issue149

Fixed #149, fixed #150 and fixed #151. Updated minion-scan script and README
Merge pull request #154 from yeukhon/issue153

Fixed #153. Update minion-db-init and minion-create-user to take user real name.
Fixes #143 Unable to modify groups when running the backend api with gunicorn
Fixed #155. Update invited user's primary user to match with his/her Persona login.
Merge pull request #156 from yeukhon/issue155

Fixed #155. Update invited user's primary user to match with his/her Persona login.