acu89216 implement role evolution for superuser/non login users. Refactor group/user management to be more robust.