Fixed users "stuck" in the wrong group af. fail.

* Users not chgrped from 'users' can now be updated
* Fixed primary group propagation (respects local settings)
* Allowed clean-up in the 'users' group
Added user property updates