update ark and template to support group other than "tomcat"; change perms on /usr/local/tomcat