added django-guardian and expanded permissions explanation