STORM-347. (Security) authentication should allow for groups not just
users. Added Bobby's suggested changes.