move resource attributes into the resource
use resource attributes in the template
proper create user/group
more attribute cleanup