Minor refactoring and comments in the access app.
Refactoring and a couply bug fixes: Fixed an incorrect get_model call and changed bare_user to return none when the user handed into it is anonymous (and therefore doesn't actually have a bare user to return).
Refactoring and added an "all" manager to models, which the admin site uses.
Changed the view mixin interface for model exposure and the querysets so the public-facing site only displays non-deleted data.
Fixed an issue with from-clause aliases in some queries that use the "then" queryset method.
Added authentication logic for bare users that just creates a new bare user and added some convenience functions.
Fixed some permissions-checking code.
Added a "force" parameter for the "then" method call inside of "newest" methods on querysets and managers.
Added links to workflow's default index page's headers to view listing and creation pages.
Fixed a permissions issue with the API where it wouldn't allow users to view the root API endpoint. Also remembered to add simulated HTTP verbs to form views.
Forgot to add an admin autodiscover call to the root URLs conf.
Fixed an incorrect import for an exception class.
Altered the linking app to redirect certain links and improved the models class hierarchy.
Added CSRF token rotation to the logoff function.
Added a stand-in for DRF's API-exploration template.
Improved the modelform factory function to use Django's own factory.
Removed unnecessary attributes from model_viewset_factory results, and fixed bugs in LoginViewSet, LogoutViewSet, and TestViewSet.
Updated requirements and adjusted the way django-debug-toolbar middleware is loaded in. Also added some test config options.