Avocet publications module + CQL3 upgrade

Upgrade for the publications module.

Changes:
- Retrieve created publications now uses `/api/publications/created/:userId` as endpoint (GET)
- Added endpoint to update a publication `/api/publications/:publicationId` (POST)
- Added authorization checks
- Publications are linked to OAE users
- Publications contain the linked content object
- CQL3 upgrade

To create a new publication, the rest endpoint accepts the following data properties:
```
data: {
    'displayName': 'String - the title of the publication', 
    'publicationType': 'String the format (e.g. book)',
    'date': 'String - the publication date (e.g. 1394630494133)',
    'thumbnailUri': 'String - [optional]',
    'authors': 'String (e.g 'John Doe') or array of strings (e.g. ['John Doe', 'u:cam:1e2d5e8w9d', 'Jane Doe'])',
    'publisher': 'String - [optional]',
    'sourceIds': 'String (e.g. Scientific Journal) or array of strings ['Scientific Journal', 'Another Journal']',
    'issueNumber', 'String - [optional]',
    'pageBegin', 'String - [optional]',
    'pageEnd', 'String - [optional]'
}
```

The `oae-publication` module will dispatch a `created` event when the publication is created. The `oae-tickets` module listens to the `created` event and generates a ticket afterwards.