STORM-347. (Security) authentication should allow for groups not just users.