fixes #812 - new permissions model, user group role and nest support, role filters for better granularity
fixes #3693 - API v2 - accept GET json format of object in PUT/POST requests to add/remove has_many associations
fixes #3017 - split APIv2 controllers from v1 parents