Validate all Permissions and Guards

[NicolasDontigny]

(filled in by @Samuel-Therrien-Beslogic )
We need to validate that routes (including APIs) are only accessible to:

• logged in users
• users of the proper level (visistor, admin, super admin)
• Can only modify their own orgs, sites, posts, etc.

[Samuel-Therrien-Beslogic]

Whilst on the subject of security, let's review our password storing process as well. It's probably fine if completely handled by Django. But let's validate just in case.