Make the body text in the view&edit table link to the edit form.

Submit exceptions

Conflicts:
	django/website/transport/items.py

Conflicts:
	django/website/hid/templates/hid/add_edit_item.html

Disable API URLs for security reasons

Timestamp formatting

Make the update button first in the code so that html5 browsers consider it the default button when pressing enter.

Conflicts:
	django/website/hid/tests/add_edit_item_view_tests.py
	django/website/hid/urls.py
	django/website/hid/views/item.py

This is a temporary fix - we should fix this properly by getting
the serializer to format datetimes for us.

Disabling the API urls is a quick fix security measure.  Obviously we'd
want the api urls to exist -- with suitable authentication in a real
system. And it sucks to loose the ability to use the web interface to
the API that DRF provides during testing, so here I'm disabling only
if DEBUG=False

The API urls don't need to appear in the system urls.  They code that
uses the api, including the transport layer, can function without it.
This commit removes all the calculation of correct urls using reverse
(which depends on the ruls being included in the systme urls) and
replaces with just spaces -- which seems to work just fine.