Default groups

Part of the work towards issue #43 .

After investigating a number of options, the sanest method I can come up with to create the groups with the correct permissions is to add a specific management command to do the work, so this does that.