updated
disable 'authorities', enable 'groups'