remove django.contrib.sites; exclude permissions; update User model;