in group allows you you to specify a group of values, i.e. 3, 4, 7, 9 to allow access. where you are only using a single value of 3, you do not need to use the in group comparison.
Does you login page set the ALID session?
On the login page, double click the Authenticate user server behavior, go to the third step, and make sure that the ALID session is being set.
For the other issues:
you have another thread that I started a ticket for, we will look into this error in that ticket as well.