Fixed and improved various issue in admin module (especially the Role editing which was not working as expected.)

Added CMS_MODULE.permissions to allow module to declare the potential permissions.
Added support for CMS_LINK.is_forbidden, in relation with CMS_LOCAL_LINK.permission_arguments.
Split link "username (Logout)" into 2 links "username" and "logout".
Fixed/Changed the way auth modules alter the logout link based on "(Logout)" title, by safer solution based on `location' of the link.

Fixed usage of WSF_REQUEST.path_info by using percent_encoded_path_info which is not non unicode path info to be used most of the time.
Merged CMS_REPONSE.variables and CMS_REPONSE.values .
When possible, prefer usage of CMS_RESPONSE.user instead of CMS_REQUEST_UTIL.current_user (WSF_REQUEST) whenever it is possible.
When possible, prefer usage of CMS_RESPONSE.location, rather than usage of WSF_REQUEST.(percent_encoded_)path_info .
Code cleaning.

modules/admin/handler/role/cms_admin_roles_handler.e

@@ -83,7 +83,6 @@ feature -- HTTP Methods
 				l_response.set_title ("Listing " + l_count.out + " Role")
 			end
 
-
 			if attached user_api.roles as lst then
 				s.append ("<ul class=%"cms-roles%">%N")
 				across
@@ -92,7 +91,7 @@ feature -- HTTP Methods
 					u := ic.item
 					s.append ("<li class=%"cms_role%">")
 					s.append ("<a href=%"")
-					s.append (req.absolute_script_url ("/admin/role/"+u.id.out))
+					s.append (req.absolute_script_url ("/admin/role/" + u.id.out))
 					s.append ("%">")
 					s.append (u.name)
 					s.append ("</a>")