Revert how CROSSUSERS_ALLGROUPS_* options were applied by default, otherwise would create strange situations for group sub-admins
Refix reserved roles appearing in admin even when not in DEBUG MODE
AbstractUser now implements AjxpGroupPathProvider, to be checkable by canAdministrate(). Add checks throughout the ajxp_conf driver
Fix ajxp_role editor for #457