Replaced groups by roles.

Replaced groups by roles. A user can have multiple roles. The system is
automatically a blacklist system without configuration option. Rules are
based on filters which can easily be extended.