is there a particular reason you want to run this as root and switch down to `$USER:$GROUP`? Is it so you can override the user in the defaults file? Or to allow it to bind to a low port?

Otherwise, the normal [upstart notation to change user](http://upstart.ubuntu.com/cookbook/#setuid) is
```
setuid www-data
setgid www-data
```