Authenticated user should always belong to "authenticated" magic group

This is live hacking from an event venue. There probably is
"authenticated" constant defined somewhere, so please be encouraged to
"fix this up" properly.

This came from the conversation from one of the CTF user
ScneiderElectric Jonas Christensen.