bugfix - user > new/edit > security > can't add user/group