Card #147 front end now correctly gets staff users based on the current users group membership, api allows user retrieval with multiple roles and groups (GET /user?roleId=2&roleId=3&groupId=6&groupId=7) and assumes staff users requested if no roleIds are passed in, lookup and role repositories updated to find users by type STAFF/PATIENT, admin service also updated to support updated /user GET