bugfix: User gets authenticated when satisfy is 'any' and no group
matches.