Users performing a subject search can see groups for which they do not have vioew access

GrouperSourceAdapter always uses a 'root' session when searching so any matching group is returned regardless of whether the logged in user has VIEW privilege. The fix will call GrouperSession.staticGrouperSession to see if there is a current session (held in a ThreadLocal) and use that if available.