The url is based off of the DOI. Because the DOI is always the same,
making more than one factory instance crashes the detail page.

UnpublishedVettedCommentaryFactory does not have this problem,
as it has an empty DOI field and a valid (random) arxiv identifier.

Fix bug that allows a forged post request to create a comment,
while the submission is not open for commenting.

Only works for comments on thesis links. All comment forms
should post to this link from now on! (So all logic pertaining
comment creation should disappear from the models' detail view.)

I also added a `new_comment.html` partial template and added tests.

The datepicker behaved weird in firefox, and I think fixing it
has no priority now. I've created the VettedThesisLinkFactory
and wrote a couple of happy-path tests for the theses view.

Development

and browse) to a Class Based View, using
the ListView class as a base.
Also adds in the permission checks in the
submission process, both in the
PrefillUsingIdentifier as in the
SubmissionCreateView. This should prevent
any unauthorized submissions.