2.x

I realized many sites don't use groups, and would thus not be able to get the role-based functionality because of requirements. This refactor breaks groups out into a submodule.

The 2.x branch may seem a little premature, but since we already have a 1.0 release and this is a backward-incompatible change, it's necessary.