Added non-django way to make a webuser superuser or staff.
Refactored code, also added user permission checking.
Merge remote-tracking branch 'upstream/master' into 88790-case
Removed 'staff' toggle from configurable user permissions page.
Merge pull request #3506 from lwyszomi/88790-case

Added non-django way to make a webuser superuser or staff member.