Small fix: correct filter for abo-user m2m
Add Integrity checks for Abo.primary_user