Permission check on user object rather than username - fixes #1178
Fixes various problems with SMS and Telerivet:

* form_specific URL was not working
* SMS were not normalized making options unable to match in different casings.
* Telerivet endpoint had an error resulting in a 500.
Merge pull request #1237 from modilabs/sms_fixes

Fixes various problems with SMS and Telerivet:
Updated django to 1.5.4
use form.REGISTRATION_REQUIRE_CAPTCHA to determine whether to validate captcha, its initialized with the value in settings
util function to add the minimum required permissions for api user
recaptcha_response_field should also not be required if captcha is not required
Revert "recaptcha_response_field should also not be required if captcha is not required"

This reverts commit 79b1c54b78ac860b5d350218eb18dc8c0dc86979.
recaptcha_response_field should also not be required if captcha is not required
spelling mistake, should be recaptcha_response_field
deal with the error portion only, seems more ideal
Merge pull request #1238 from modilabs/api-to-ignore-captcha

Api should ignore captcha
pick latest packages if available
remove rest framework swagger app, not in use
add django-taggit app
add tags to xforms and submission instances
Merge pull request #1242 from modilabs/django_1_5_4

Updated django to 1.5.4
api support for tags
updated docs for query and tags
add $all to mongodb whitelist