Merge pull request #247 from steventlamb/minor

Minor
Include EXTRA_INSTALLED_APPS in MANAGED_APPS
Validate FieldPermission input on save

model_name and field_name must be valid Authorizables
Fix route function to support positional args