admin rest example, default origins, effect roles

* Applications will add default web origins based on redirect uri
* KeycloakSecurityContext now available through KeycloakPrincipal
* Added admin rest API example
* Added "effective roles" to oauth scope in admin console