Global stops

We can now perform cloning and such; in addition, I updated the permissions of many controller actions to only show the user what they should be allowed to see so that our data makes sense.

Todo: change tours, stops to show all things in your group if you have permission. I guess this would be solved by querying all users in your group and changing the 'where' clauses on stops / tours. Don't know exactly how to best do that.