Validate vat accounts, refuse company change, limit settings roles

VAT accounts are validated (company, group, duplicates, empty rows), so the VAT Audit Report picks the right rows. Company changes are refused and settings roles are limited.