write conclusion deletion into history log
require authenticated user to post a message
TESTING_USER_ID is None by default
tests for the auth blueprint
page for permission-denied
don't show message input to anonymous
require authenticated to mark messages as read
rename variable
refactor permissions checking
permission factories for add/edit conclusion
move url generation to view classes
reorganize index templates
all identities have 'everybody' need
refactor Never permission; fix permission logic