Handle quote permissions properly

- Add approve_quote permission
- Use that instead of is_staff
Handle musikk permissions properly
Fix event permission handling
Bootstrap groups with permissions
Merge branch 'proper-permissions'