First stab at security model.
Login/logout
Login and logout.
Edit user info.
Readonly forms.
Accidentally checked in some code used for testing.
Manage users.
Let users change their login.
Find users.
Manage user membership.
Find user's home.  Disable links in breadcrumbs based on permissions.
Fix test.
Test users package.