Only Admins (if is_staff is True) may access these Models for reading/writing.

Linking notes to timeslots also uses the REST API now.

Adding/Updating/Deleting schedules including collision detection is still a to-do.

See #22

Updating is constrained to defined fields.
See #22

Implemented django-oauth-toolkit for authentication.

Working on prototype for playout API (momentarily still called week_schedule())

Added permission restrictions for common users in APIs
See #23

Added playlist_id to TimeSlot datamodel
See #21

Made some minor changes in calendar.