BEANS,CORE: removed SERVICE role

- Removed all usage of SERVICE role in Perun.
- In authorization is role replaced by ENGINE role.
CORE: use only group for authz in forceGroupSynchronization()

- AuthzResolver can use Group for authorization, there is no need
  to load VO from DB. Also using VO and GROUPADMIN is too weak, since
  I could then trigger synchronization of not my group in same VO.
GUI: fixed message on pwd-reset app

- Fixed error message when missing public-key for re-captcha
  on non-authorized access.
Merge pull request #611 from zlamalp/pwd

GUI: fixed message on pwd-reset app
Merge pull request #610 from zlamalp/group

CORE: use only group for authz in forceGroupSynchronization()
GUI: fixed imports

- Just fixed imports in source file for pwd-reset.
Merge pull request #612 from zlamalp/pwd

GUI: fixed imports
DB: converted VARCHAR2 to NVARCHAR2

- On Oracle use NVARCHAR2 instead of VARCHAR2, since it ensures data
  are in UTF-8 format + column limit semantic means characters, not bytes.
  Limit of 4000 bytes on data in column is still present.
- Updated DB version to 3.1.15
- Added insert with current DB version to end of file, since it's value is
  expected to be present even in empty DB.
- Removed some whitespace from inside SQL statements.
Better version of parsing rawName to user titles and names

 - add new version of method parseCommonName
 - parse titleBefore, firstName, lastName and titleAfter
 - do not use 1 regex like in the last version of method, instead of it
   parse all values to the array by spaces and then choose which value
   is which part of user full name
 - add UtilsIntegrationTest with test of method parseCommonName
 - fix catching InternalErrorException in registrar on calling method
   parseCommonName (there is no InternalErrorException now)
Merge pull request #613 from stavamichal/betterParsingOfUserNamesWithTitles

Better version of parsing rawName to user titles and names
Merge pull request #614 from zlamalp/db

DB: converted VARCHAR2 to NVARCHAR2
Merge pull request #580 from zlamalp/service

BEANS,CORE: removed SERVICE role
New authz for topGroupCreator

TopGroupCreator can call getCompleteRichMembers and getGroups

GroupManager can call this methods anyway and topGroupCreator can easily
create group and become groupManager

This is hack for eduGAIN group service - because miniapplication for
eduGAIN group service call this methods at start and not when they are
really needed.
Do not set role VO_OBSERVER in eduGain registrar module

Users in eduGain group service should not see other user's groups
Hack to add perunv3/admin@META as privileged user
All VO edugain_group members get groupManager of members group

Without that they can't see other members' preferred mails.
AuthzResolverBl.getPerunPrincipal calls refresh authz

It's important for external application / libraries to have up-to-date
authz for actor.