* Default ticket validator now does more actual permission validation.
* `validate_ticket()` is now called ''before'' the ticket is updated. This lets manipulators validate req.args prior to the ticket being updated.
* Added `.title`, adding tooltips to fields.