Change delete argument handling
Add write permission checks to base model
Write denied error class
Don't allow write if no user is passed
Check to see if we have to load objects for access control
Access denied middleware handling
Load access denied middleware
Make sure we get apikey from the body
Write access check uses Thread.current
Store user in Thread.local and env
Make sure write check works when changing owners
User string representation for logs
Change order of security setting changes