Some minor changes.
Enforce permissions on server side when changing permissions.

Also updated some comments.
Merge branch 'master' into testsuite

Conflicts:
	nrd/app.js
	nrd/models/checkout.js
	nrd/models/db.js
	nrd/models/mailer.js
	nrd/models/reservations.js
	nrd/public/js/checkout.js
	nrd/public/stylesheets/main.css
	nrd/public/stylesheets/main.scss
	nrd/routes/checkout.js
	nrd/views/partials/additempage.html
Merge branch 'testsuite'