Log the first name of the group

So we see "Auth-Type foo {...}"
instead of "group foo {...}"
Use AUTZ rules for AUTH groups.  Fixes #425