Added django-guardian for object-level permissions.
Added `deis sharing:add` and so on for formations and apps.
Added tests for initial superuser creation.