we are; `is_superuser` and `is_staff` are now properties on `UserProfile` that look at acl stuff.