using the group attribute instead of the user attribute for groups

see http://tickets.opscode.com/browse/COOK-3359