Avoid the need for a specific group to hold users allowed access as we can use the AllowUsers and DenyUsers directives instead.  Also add support for groups using AllowGroups and DenyGroups.
Added Rakefile and made puppet-lint fixes.