make sure all memberships have role (default to 'member')
new version of permissions is passing all tests, need to clean up api
clean up permissions api