CORE: use only group for authz in forceGroupSynchronization()

- AuthzResolver can use Group for authorization, there is no need
  to load VO from DB. Also using VO and GROUPADMIN is too weak, since
  I could then trigger synchronization of not my group in same VO.
GUI: fixed message on pwd-reset app

- Fixed error message when missing public-key for re-captcha
  on non-authorized access.
Merge pull request #611 from zlamalp/pwd

GUI: fixed message on pwd-reset app
Merge pull request #610 from zlamalp/group

CORE: use only group for authz in forceGroupSynchronization()