Implement membership and authorisation (rough). Enable migrations.