fixes #812 - new permissions model, user group role and nest support, role filters for better granularity
fixes #3491 - API v2 rabl templates base, main, show for each controller
fixes #3017 - split APIv2 controllers from v1 parents