New role topGroupCreator

 - this role give only one privilage to user (create new topLevelGroup)
 - add methods isVoObserver, isTopGroupCreator

-----------------------------------------------------
AFTER MERGE THIS CODE:
1] create new role in DB (topgroupcreator) (this part is probably
automatic, so control it)
2] add these information to DB changelog