[Zope] cookie authorization + user groups???