Group bootstrap issues, authentication now exposes UserSession with cached accessible groups, login rest endpoind relocated to profile