PROV-908 Support for user and group access via installer

We had to change the install order a little bit (move UIs after users
and groups) to support this. You can now add segments like this:

      <userAccess>
        <permission user="admin" access="edit"/>
      </userAccess>
      <groupAccess>
        <permission group="cataloguer" access="read"/>
        <permission group="admin" access="edit"/>
      </groupAccess>

to the UI, displays or search form sections of your profile to set user
and/or group access at install time. Users are referenced by user_name,
groups by code.