Moved the endorsed directory symlink task

Moved the task which creates the endorsed directory from the tomcat role
to the idp role. This is necessary to properly encapsulate appropriate
tasks to their corresponding roles.
Moved the tomcat role above the idp role

The tomcat role has now been moved above the idp role, as the tomcat
role sets the stage for certain tasks in the idp role.
Added task to change permissions of shibboleth-idp

The directory /opt/shibboleth-idp should now be placed in the tomcat
group and have only read, write and execute permissions for only the
root user, and only read and write permissions for everyone else. This
should ensure security.
Added a new task to recursively add files to group

A new task has been added for greater flexibility in changing the group
and permissions of the shibboleth-idp directory. The first task now only
handles the recursive group change. The second ensures the correct mode
for the top level directory.
Modified task to ensure that the user is set

Added root=user to the main task to ensure that the user permissions of
the folder and subfolders and files remain as root.
Changed name of task to more accurately reflect

actual functionality.
Fixed issue where incorrect keyword was used

An issue where the incorrect keyword was used to change the owner
permissions has been rectified.
Merge pull request #41 from ausaccessfed/feature/shibboleth-permissions

Modified /opt/shibboleth-idp directory permissions
Resolves #40