Add upgrade script
Bump version; change user and group references in is_member_of() to role