fixed workflows

This will fix two issues:

1) support for Site Administrator role (totally not supported before)

2) workflow security fixes. Right now if you put an issue tracker inside a private folder, the folder security is totally skipped. There's no motivation for giving to Anonymous users explicit powers.