commit in the middle of overhaul. completed: ExperimentACLs are request-independent, IP based auth is removed, groups now live in user object, not in request object
A Django-compatible auth backend for object level permissions.
new authorisation system based on updated ACLs

ObjectACLs can be applied to any object using the Django ContentType
framework. Documentation will be available soon.

Permissions for specific objects can now be checked via the
Django-standard user.has_perm() call. Details will be in docs, too.

Code cleanup opportunities provided by these changes have not been
fully realised yet. Something to look forward to.
re-enabled tokens in the context of the overhauled auth system
some minor fixes and documentation of the changes in auth
docs formatting
docs formatting
Merge branch 'auth-overhaul' into mytardis-api

Conflicts:
	tardis/settings_changeme.py