Granting permissions will now send an email to the recipient to accept permissions
 - no more searching for existing users by name or email
 - newly granted permissions are stored without a userId
 - permission recipient clicks link to come into system to accept permissions
 - the user id determined by auth provider will update the stored permission with a user id
 - some tests added