Close #51

Close #52

See #21 #23

Shall we still put this in a sub app?
Would still need to figure out how to hook from the sub app into the serializer viewsets (and not vice versa) in order the custom fields get saved.

See #21

Updating is constrained to defined fields.
See #22

Implemented django-oauth-toolkit for authentication.

Working on prototype for playout API (momentarily still called week_schedule())

Added permission restrictions for common users in APIs
See #23

Added playlist_id to TimeSlot datamodel
See #21

Made some minor changes in calendar.

See #23

- Let them only edit their own user profile and only certain fields
- Let them only edit shows they own and only certain fields
- Let them only edit own notes and only assign them to shows and timeslots they own

Removed some unused code and added some help texts to form fields.

* Improved note selection: Users choose their shows and corresponding timeslots are loaded into the select via ajax (improvement still necessary to avoid queryset when initially loading)
See #17

* Users can only see and edit their shows, timeslots and notes
* Users can only edit their own profiles

* Changed fallback_playlist to fallback_playlist_id
* Timelots inherit the is_repetition flag from their schedules when created
* Added field 'memo' to timeslots (for internal notes)
See #21

* Extended datamodel of user profile by introducing "profile"-subapp
* Implemented thumbnail generation for shows, notes and user profile using django-versatileimagefield (see requirements.txt)

See #21