using only active memberships for group leadership and post checking
authorization manager
integrating authorization in web layer
removed jaas based authorization from AccountManagerBean
Merge pull request #130 from kir-dev/roles

roles