rest: add groups to jwt object