code: func NewTokenGroupAdder(auth authenticator.Token, groups []string) authenticator.Token {
  	return &TokenGroupAdder{auth, groups}
  }
docs: // NewTokenGroupAdder wraps a token authenticator, and adds the specified groups to the returned user when authentication succeeds