STORM-347. (Security) authentication should allow for groups not just users.

Could you add @Override annotations, and unless the javadocs are different from the interface they override are really not needed here.