add command to grant users operations team privileges on HQ
add ability to remove user from accounting role and make the role a role with a specific privilege of viewing accounting admin reports
making the add new item in accounting interfaces look a little sleeker
accounting default should just be /hq/accounting/
require privilege of accounting admin for accounting views
only show accounting tab and submenu option if the user has the accounting_admin role
use requires_privilege_raise404
update submodule reference to django-prbac
Merge pull request #2518 from dimagi/new-operations-role

New PRBAC UserRole for Operations Team