JBossAuthorizationManager should handle null RoleGroup before passing to mapping framework

If the security context roles is null, then the mapping framework is being passed a null role group. It should be an empty role group.