users item: fix primary/secondary group situation

this should complete the fix for #110