Create global registry inside permission()

Avoids import-time side effects.
Add permissions related settings

Currently, the only supported setting is REQUEST_TYPES. This allows
request classes other than Django's HttpRequest to be specified (e.g.,
the Request class from Django REST Framework).

PERMISSIONS = { 'REQUEST_TYPES': ('package.module.Class',) }