Add activation callback and user perm change

- User permission change is essential for leveraging django admin site
- activation callback allows adding new default group