Fix a silly mistake in permission checks
Make models iteratable, including permission checks
Refactored /user/me to be a subset of the /user/<id> code
Test permissions with a second user account
Add question set modification