use groups for authentification