Merge Permissions into Master

Added published/unpublished authentication to usgin/metadata-server, so we can remove that authentication from Django (because it's really slow!).