GeoFence group list is too limiting, add '*' to match any role

When the option “Use GeoServer roles to get authorizations” is used, the logic requires a list of predefined groups, so that the last matching group (a break is missing?) is used for the authorization in GeoFence

see

In architectures where the authentication is plugged, we may not know in advance the list of available roles, so we may want just take any role (probably there will be only one assigned when the user logs in).

We may add regex handling in this list, but, in order not to overengineer the logic, we may just consider the case where the “Comma delimited list of mutually exclusive roles for authorization” only contains a “*”; in that case, the first group associated to the current user should be used.