Add Virtual Capabilities

A users group now adds "virtual" capabilities to the user.

`current_user_can` and `user_can` work with the custom capabilities, in
other words.

Moved away from `get_posts` because it failed when fired before the
taxonomy was register. Instead we know have a custom query modeled after
the SQL created by `WP_Query`.