skip md5 when it is not sended

replace real username with test users in tests

updates of files, notes, permissions and tags should be done through the
dedicated end points

also db initialization has been moved before other imports, so that not
it is possible to load collections in Storages

when project permissions get updated propagate them to sessions and
acquisitions

only collections and projects routes can receive permissions updates

bugfixing
adding root checkbox to debug app

fix avatar handling and create schema
filter permissions for containers in handlers

define is_true and has on base.RequestHandler
fix test_collection.py

use tempdir custom module instead of tempfile
fail with 400 when ObjectIds are not valid
check existing schemas against a list at startup
add json schema draft 4 specification
give a more detailed error message for keys mismatch
remove upload method in core.py = dependencies (util.upload_ticket +
json schema)
remove search call + method = schema

https://github.com/scitran/api/wiki/Data-Model

check keys in requests from schema