Fix/proposal validations

Refs #909, #894 and BNC #860117

Do not run validations from within the apply_role, as we can get failures during installation. Also run after_save validation in the controller, after proposal_commit has fully run, as it recurses on itself.