don't create sessions for groups with whom the user is already authed