Moved installation of tomcat above idp

The role 'tomcat' has been moved above the role 'idp' as the tomcat role
provides necessary configuration of users and groups for the idp role.