Usergroup roles support

Working version which currently breaks a lot of tests however is ready
for testing by devs. There are still things to improve. Also we enable
users that can edit usergroups a privilege escalation atm.
Permission evaluation logic refs #3804
WIP New permissions

Implemented base collection filter in authorizer so we can limit queries
just to records to be listed e.g. Support for not-granular resources in
filter form (AuthSource). Modified link helpers to support new
permission system.

Converted:
- architectures
- audits
- auth_source
New permissions for SmartProxy
Final round of converting WebUI components

All my_* scopes that were used for authorization were substituted by
authorized scope. All enforce_* method and include Authorization
removed. Fixed some errors that appeared by host authorization, e.g.
ambigous columns names. Web UI should be ready for "after migration"
permissions now. There's still a lot of old code though, it's being
tracked however.
API v2 migrated to new permissions model

API v1 migration to new permissions model

Set authorizer filter for controllers

Various typo errors on API controllers corrected

Remove role validator to make migration script pass

Authorizer in application controller

@authorizer goes in application_controller and it is called from the
views, since it's a helper method. This saves us from having an
after_filter or @authorizer defined everywhere.
However I believe this might be a security risk and Authorizer should
be a singleton class.

Use @smart_proxies over @proxies for consistency
Merge pull request #3 from eLobato/permissions_ares_change

API migration to new permissions model