Changed use of Scopes.SINGLETON to Singleton.class
Implemented real system bootstrapping support.
Split Security services into System and User layers to allow system bootstrapping.
Added User and RoleGrant types to support authorization needs.