BACKWARD INCOMPATIBLE! This update requires the User and Group objects to have a FK to the Organization ID (not the name as we've been doing). Do not try using this until the db tables have been adjusted. In this update: swappabel model support, migration of some permission functions, AST-based importing to prevent circular imports, better method of specifying tables to preserve during flush (currently only permissions use this)