narrow membership scope for GroupRole and GroupMembership to just Agents
Adding support for group hierarchies when checking group membership.
Merge branch 'master' of github.com:pedroigor/picketlink