Edge cases for effective_principals with groupfinder.

* Do not return Authenticated when authenticated userid is None due to
  groupfinder returning None.

* Call groupfinder with authenticated userid not unauthenticated
  userid.