LUN-914 -- add a dedicated 'Can access user setup' for configuring site admin groups

During the new deployment, in order for the new permission object to be created you will need to run a:

```
 django-admin.py syncdb --all --settings=hostedbento.settings
```