Revised SWID inventory
Removed all users and sessions from default db
Switched to custom API permission class

Access to the API is granted in two cases:

- User is an admin (`is_staff=True`)
- User has the `auth.write_access` permission

Otherwise, the user is rejected with a HTTP 401 or HTTP 403 status.
Added CSRF_COOKIE_SECURE to settings.ini
Enabled clickjacking protection
Added paging to potentially large tables
Added dajax wrapper and loading indicators
Moved ajax-utils.js content to common.js
Added error handler proxy to remove ajax indicators on failure
Added version column to regid detail view
Reordered save and delete button in package view
Added matching package link and highlighting to inventory view
Added package name and version column to log view
Avoided multiple ajax requests caused by hashchanged events
Changed default timezone to UTC
Fixed get_sessions_in_range
Hide global ajax loading indicator by default
Use recommendation display representation
Added frontend validation for creating files