require approved group for write views
add next redirect for login
record user when editing models
commands to manage users and groups