CORE: add authorization to getVoById() and getVoByShortName()

- For GROUP_ADMINs, user must be group admin of requested VO.
Merge pull request #466 from zlamalp/vos

CORE: add authorization to getVoById() and getVoByShortName()