Card #226 patient security, can only get own patient details as RoleName.PATIENT
fixes for observation service and tests