v1.2.1

Security fixes:

• Tighten permissions so only appropriate users can add/edit/remove PIDs
• Return item reference in PID API records and hide PIDs of items the user cannot see
• Wrap PID minting and removing in form and add CSRF token
• Remove unused PID API target from form