Simplify out of scope var lookups for config.pp

Lookup out of scope vars in config.pp rather than in the template for
user and group. This simplifies support for multiple versions of Puppet,
making the variable lookup local in the template.