Allow mapping between groups and roles

[johnament]

Java EE has a notion of mapping groups to roles. JWTs may include both, however the MP JWT specification has an EE specific test (but apparently EE defines no standard mechanism for this, just that its possible).

To do this, add a mapper function and allow developers to implement it to convert their JWT groups to roles for role checking.