Vuln ownership

Ownership capability added to vulnerability application.
Open-issue: read-only view for vulnerability-editors users is still not implemented but all actions allowed are consistent.
NOTE: I've added comments to admin.py, but they need to be addressed in admin_tmpl.py