Support for "can proxy" permission
Support for "single sign-on member" permission
Improved support for custom user models