Granular permissions

Fixes #49

Make it easy to define who can access the sql explorer.
EXPLORER_PERMISSION_VIEW and EXPLORER_PERMISSION_CHANGE can be changed using django config settings and should provide a callback that accepts a user as the only argument and should return True or False.
The default is still that the user is required to be staff.