FIX: typo
FIX: `may?()` is not a method of `CfUser`
FIX: typo in method name (it's badge, not bagde)
FIX: trigger should not try to set latest_message to NULL
FIX: typo in method call
FIX: set default value for latest_message (to avoid NULLs)
FIX: refactored to new notifications structure
FIX: refactored tests
FEAT: now users w/o rights may not create new tags
FIX: use default case instead of explicitely setting ascending
FIX: authorization is done via auth framework