Taking into account PR's remarks

users have to be created before groups so that the overlay takes the
membership into account.
Taking into account PR 3

setting the reference integrity check flag to false.