wip avoid crashers due to AB access denied
asynchronous authorization; slimmed down person/group initialization
refac: multi-values should behave like arrays (empty if missing)
Merge branch 'auth'