BUGFIX: include group privileges on auth menu page