Removed old JAX-RS user management. Updated Mongo user management impl
to correctly handle authorities. Updated security classes to properly
match authorities.