add permission check to visitation form actions
Merge branch 'master' of https://github.com/Merikotkat/Merikotkat into auth