fix add user: allow group assignment