Add a way to opt-out of the state/permissions checking

Should be used only for bulk imports and for testing purposed.
Fix modifier evaluation

We don't need to evaluate all bajillion requests when applying modifiers.
Require Auth IDs to be unique for Test Auth users and groups
Don't use the high limit for XHR requests

XHR requests are to update the UI, and we don't want 200 requests filling the page.
Bugfix: Account for modifiers being added that are already voided
Release 0.9.9: Please bugs, stop

Bug fixes with a single admin option added:
* Modifiers should work now.
* Don't use the 200 Request limit for XHR HTTP requests.
* Tighten up Test Auth model constraints.
Start 0.10.0 development