Bugfix: get permissions working for individuals again

The permissions specify the Person, but we were checking against the
Identity.  Needed to introduce an indirection.

To do this, introduced a pimp of User that knows about Person.  Took the
opportunity to begin cleaning up the PersonModule slightly, although
there's a lot of refactoring yet to go.