o Added support for role registration to Application.py
    Products may define a __.role_names in their __init__.py
    which may be a tuple of role names which will be added to
    the global list of role names which appears in the role
    assignment select box when defining/editing a user.

  o Application.Application now has a default __allow_groups__
    attribute which is a UserFolder with no members defined.
    This default top-level UF is not visible in the UI, and
    the user can create a new UF at the top level (in the
    Application object) at a later time which will simply
    override the default and be visible in the UI. Since the
    default UF has no users, an out-of-the-box application's
    management interfaces will effectively be available to the
    superuser alone.

  o Removed the __init__ in Folder which created a default ACL.
    This is no longer needed.

  o Made some minor (but controversial!) style consistency fixes
    to some of the OFS templates.