Insight Client should use respectful groups

Currently Insight Client relies on the logic that caller always is system user. 

By giving that user managerial right we expose high privilege API to any user of the client.

Groups should be derived from the Session