fixed authorization with permissions has_perm() method of CombinedAuthBackend needed additional functionality and a check on the username instead of the whole user object and a lot of css and js fixes