consistently construct username/groups for MetacatHandler calls - also consistently call isAuthorized
consistently construct username/groups for MetacatHandler calls - also consistently call isAuthorized