extracted JSF composite component for credential editing
updated user stories
improved backing bean for the password form

Removed the actual and expected password values from hidden fields in
the form and made the bean easier to understand
CSV array converter must account for an empty input string
fixed contract violation in JpaUserGroupMemberRepository