ARGO-322:  test webauth privgroup retrieval and impersonated group override
ARGO-322:  test remembering and forgetting groups to impersonate