doing some syncing of the groups... auth still pretty brittle...