legacy: fix user filtering in admin not to rely on exact names for 'Public Frontend' and 'Public Backend' sub-groups