Use JCR observations to invalidate user & group data provider cache

The user & group data providers now need to be explicitly invalidated when a change is made. This causes the data to be out of date when other sessions create, edit or delete users or groups.