Use WSSubject instead of UserRegistry for groups.

Retrieving group information from the JAAS subject obtained from
WSSubject saves a registry call.