Apply permissions

@noahsark769 can you check this pr? I pass tests locally but I'm failing a bunch on remote. This could be due to me disconnecting the revolvuserprofile signal. 
Ehhhhhhh I feel like this function is useful but maybe we should write our own that just returns `User`, because we might take out django_facebook