make use of groups from authenticated used to collect both roles and groups before it can be used in runtime

(cherry picked from commit 043de7aef6bb84329826afb2c2d07f8bb549f4d6)
added missing excludsion for weblogic assembly