STORM-347. (Security) authentication should allow for groups not just users.

This is likely to be called very frequently and fork/exec are not fast.  We should implement some of the caching the Interface suggests should be going on.