root.user_create: fix assert checking user is in group