finally got group membership working