Files can now be auto-saved into a secure folder on the server.
This will prevent people from opening files that do not copmly with
their permissions.

Further, it's now possible to open all types of files in the partner dashboard.

Passwords will be hashed with the Argon2 library.
https://docs.djangoproject.com/en/1.10/topics/auth/passwords/#using-argon2-with-django

Also, new passwords will go through 'common-passwords-checks'. This will prevent
access to accounts using one of those common brute force password hackers around,
in case of a breach.

The settings environment has been changed to the preferable
 situation in which secrets are kept secret, but all settings
 are still tracked, even local settings. Use the updated readme
 file to get started again. Please track your settings, unless
 the settings really are secret!

The url is based off of the DOI. Because the DOI is always the same,
making more than one factory instance crashes the detail page.

UnpublishedVettedCommentaryFactory does not have this problem,
as it has an empty DOI field and a valid (random) arxiv identifier.