Move and `state-migrate` news items away from
 the mighty `scipost` app.

Migrations are ready to be run without dataloss.
 If asked during `migrate` to alter stale FK field,
 run with anwser `no`! This is not stale, Django just
 thinks it is due to state migration of the new apps.

The settings environment has been changed to the preferable
 situation in which secrets are kept secret, but all settings
 are still tracked, even local settings. Use the updated readme
 file to get started again. Please track your settings, unless
 the settings really are secret!

Write tests and refactor html.

The url is based off of the DOI. Because the DOI is always the same,
making more than one factory instance crashes the detail page.

UnpublishedVettedCommentaryFactory does not have this problem,
as it has an empty DOI field and a valid (random) arxiv identifier.

Fix bug that allows a forged post request to create a comment,
while the submission is not open for commenting.

Only works for comments on thesis links. All comment forms
should post to this link from now on! (So all logic pertaining
comment creation should disappear from the models' detail view.)

I also added a `new_comment.html` partial template and added tests.

I had replaced ThesisLink#header_as_li with a partial template,
but forgot to replace it in some places.

The 'As contributor' author field contained raw variables that were not
within tags.

The datepicker behaved weird in firefox, and I think fixing it
has no priority now. I've created the VettedThesisLinkFactory
and wrote a couple of happy-path tests for the theses view.