Classification permissions

Adds permission controls for classifications. 
UserGroup#has_many users currently only on memberships.