Add permissions checking in templates, forms and view; add 'django_extra_views' requirement to implement CatalogMessagesFormView with a nice CBV, bumping version