Implement Role Mapping on login

[chrisknoll]

New feature: External Role Mapping:

• maintains a association between a claim and webAPI role.
• Can be maintained via CSV load or indiviual REST endpionts
• Login flow updated to synchronize mapped roles on login.
• Added tests for add/delete/overwrite and validation rules.

Legacy tables have been moved:
ALTER TABLE ${ohdsiSchema}.sec_role_group RENAME TO sec_group_role_import;
And renamed constraints to match table names.

[chrisknoll]

In addition, I'm attempting to fix the authentication issues due to the OIDC re-work from #2533

[chrisknoll]

I disabled the endpoint guard tests because the test showed these endpints not guarded:

GET /evidence/conceptofinterest/{conceptId} (EvidenceService#getConceptOfInterest)
POST /vocabulary/commonAncestors (VocabularyService#getCommonAncestors)
GET /evidence/study/{cohortId} (EvidenceService#getCohortStudyMapping)
POST /vocabulary/relatedconcepts (VocabularyService#getRelatedConcepts)
GET /evidence/labelsearch/{searchTerm} (EvidenceService#searchDrugLabels)
POST /vocabulary/resolveConceptSetExpression (VocabularyService#resolveConceptSetExpression)
GET /vocabulary/search/{query} (VocabularyService#executeSearch)
POST /vocabulary/search (VocabularyService#executeSearch)
GET /vocabulary/concept/{id}/related (VocabularyService#getRelatedConcepts)
POST /vocabulary/descendantofancestor (VocabularyService#getDescendantOfAncestorConcepts)
GET /vocabulary/concept/{id} (VocabularyService#getConcept)
GET /vocabulary/vocabularies (VocabularyService#getVocabularies)
GET /source/daimon/priority (SourceService#getPriorityDaimonsEndpoint)
POST /vocabulary/lookup/identifiers (VocabularyService#executeIdentifierLookup)
POST /vocabulary/lookup/mapped (VocabularyService#executeMappedLookup)
GET /evidence/mapping/{conceptId} (EvidenceService#getConceptCohortMapping)
GET /vocabulary/concept/{id}/descendants (VocabularyService#getDescendantConcepts)
GET /vocabulary/domains (VocabularyService#getDomains)
POST /vocabulary/compare (VocabularyService#compareConceptSets)
POST /vocabulary/conceptlist/descendants (VocabularyService#getDescendantConceptsByList)
GET /evidence/label/{setid} (EvidenceService#getDrugLabel)
POST /vocabulary/lookup/sourcecodes (VocabularyService#executeSourcecodeLookup)

Some of these can be removed, some of these could be marked as unguarded. Need further review.