Added support for multiple groups per user

Added a UserGroup model, which represents a group that a single user is
in.
Updated user forms to allow multiple groups per user.
Added Permission spec for RSpec.