Add 'Group' permissions to datasets

Gen suggested we add the notion of groups to assign access to datasets (we already have support for labs and individual users).
Ideally we would use django's auth groups to handle this but that entails giving access to auth group management to non-superusers.