Check permissions when accessing attachments

Attachment files dispatching is now done through `RawAttachmentView`
view that checks for appropiate permissions.

When using the development server this view just redirects to the real
media path of the file.

When using the production server the special redirection header
`X-Accel-Redirect` is used instead to improve efficiency by instructing
the server to dispatch the file instead of django, but you also need the
following configuration (Nginx):

location /attachment-files {
    internal;
    alias /path/to/taiga/media/attachment-files;
}

It's recommended to also restrict the direct access from outside to the
`attachment-files` directory by using some configuration like this:

location /media/attachment-files {
    deny all;
}
Add is_admin to memberships, some filters to the api and some fields to the serializer
Sample data command parameterized
Order members
Merge pull request #55 from taigaio/attachments

Check permissions when accessing attachments
Change is_admin for is_owner in the membership model
WIP: Simple proposal of permission management
WIP
WIP
WIP
WIP
WIP
WIP
WIP:
Import some rest framework parts with own changes.
Add views.py
WIP:
WIP:
WIP
WIp