Agsec 183

Good morning, this is related with the super user Jira. For testing:

user: admin
password: 123 
user: developer
password: developer

Flows to test:

1. Login as admin, create several applications, then logout. Login as developer and check if you can see admin's applications. (they should not be available to developer)
2. Login as developer, create several applications, then logout. Login as admin and check if you can see developer's and admin applications (they should be there)
3. Go to http://localhost:8080/auth/admin/aerogear/console/index.html# and try to login as admin
4. Go to http://localhost:8080/auth/admin/aerogear/console/index.html# and try to login as developer (it should be forbidden)

This pull-request should go into 1.0.x branch and master.