Add realm support

/to @ritch 
/cc @bajtos @dashby3000 
What is the relation between `Application.realm` and `User.realm`?

Are we missing a `Realm` model with relations `Realm hasOne Application` and `Realm hasMany Users`?

Should we validate referential integrity of `realm` properties, i.e. check that `User.realm` is an existing realm?