edit_site view doesn't need project_id arg
make urls, view names, and template names consistent
subclass guardian's UserObjectPermissionsForm to exclude Django's default model permissions...they make no sense to be managed at the object level
use GuardedModelAdmin for managing object-level perms in the Admin interface