Improve auth handling of Locators

Ensure user admin screen gets the union of all possibly matching group names.
Smarter default group naming.
STUD-1003

@singingwolfboy @cahrens One of you please review
@zubair-arbi @adampalay Also, one or both of you.

I have no way to really reproduce the bug, but I believe test_permissions does.