user profile auth and inst admins

[dsschult]

One interesting case here:

For posterity, the issue was that mrongen was not in the institution group, but was in /institutions/IceCube/Mainz/mou-dashboard-editor. So when Sebastian tried to load the page, it tried to look up details for mrongen (like his name), and failed due to an authorization error.

Hopefully the next major refactor takes care of this by syncing up certain actions (if you delete a user, they are removed from all institution groups recursively).