editors can now create, edit a subset of user fields.
better DRY for Group def'ns in initgroups command.
add a convenience Membership.city property.
in directory.admin, use membership.city property.