refactor models
model design, account and group
membership of organization
rename. model Group -> Team
permission works now