[#818] Remove `userRoles` parameter from User object

* User roles assignment moved to `UserAuthorization` entities
[#818] Restrict user roles definition to `SuperAdmin`s
[#818] User `surveyGroupId` parameter to filter requests
[#818] Generate survey and survey group path