[Backport] Fix flash_messages.error(request, msg) call, object receives only msg.

(cherry picked from commit f8986c8b669037096f41bc2e5504a5e712b84364)
[Backport] Support for methods on User model when checking permissions

The ``permissions_required`` decorator, and hence
``Application.permissions_map`` and
``Application.default_permissions``, now
handle both methods and properties on the User model.
Previously, it
wasn't supported, but a docstring showed
``is_anonymous`` as an example,
which is a method.

Cherry-picked from 8b610f66cd79b38f2a12509a44f37490117f6267
Bump version to 0.7.2 and update docs