More work towards group implementation. Group's 'contains' metod now checks Users rather than RoleAssignee.