Added UserGroup Capabilities logic and tests, as well as User.isCapableOf()