fix id seperation used inside autocompletion for impaired users
renamed user and role id input for non-impaired users, gives us prettier generated ids
Reworked Tests:

* fixes broken existing principal and group membership features
* adds new tests for adding groups and users as principals with both an impaired and non-impaired user