modified auth_groups to be enabled at a later time, modified whitelist check to accept null expiration date