Protects loose Upload link with permission check
Expands permission check on edit and delete links
Adds view decorator for verifying authorship
Adds post_syncdb to enforce default auth objects
Adds custom 403 message
Adds 404 template
Forces attempt to render 404 and 500 with RequestContext