Using named scope instead of direct where.
Unwinding the login, assigning user.usergroups in one step.