Audits

## TODO
- [X] Association between Pages / Templates
- [x]   Publish Pages  on Template Publishes
It's up to the config serializer, regardless.

Ignoring Publicist, I'm not convinced that allowing anonymous access to this api is okay. Why's this in place?