Fix edit permission action

Fixes two problems in edit_permission:

1. it didn't actually do anything, since Django 1.2 it seems, because the submit name `_save` in POST data specifically tells Django admin not to invoke actions.
2. form validation errors were completely invisible; now at least they are shown (not very nicely) with `message_user`.