LPS-46353 Handle adding and removing UserGroupRoles separately
LPS-46353 Sort
LPS-46353 Move logic into edit_user.jsp where the rest of it is
LPS-46353 Keep the "allRoles" attribute since it's part of the contract for 3rd party developers who are providing custom impls of that JSP from a hook.
LPS-46353 SF