document difference between user.manage and user.supervise
use can instead of has_permission
allow to change badge group only if can.user.supervise
fixup "allow to change badge group only if can.user.supervise"
fixup user badge validation
Merge pull request #840 from xi/feature-fix-moderator-create-badge

fix moderator create badge