Add 'admin' group.

- add an 'admin:promote[user_id]' rake task
- fix membership relationship between users and
  groups