puppetlabs/apache/#154

The web server group should also be declared, and be the web user's primary group.