apply visibility rules from usergroups

* expand bitfields to virtual sets (fields described in xml)
* join group to current_user, for guest join unlogged group
* filter forums by access rights
* filter posts by rules for group and by visibility flag (admin can view all)