use builder-classes for AuthOrgUnitSimple and AuthorizableOrgUnit, adapted unit-tests.