normalization of filters functionality and ui. added unique constraint to group names. locked down vanilla users authorization. more legacy migration fixes and tweaks