Ok so these are the cookies for my user (which can log in without any issues):
these are cookies for someone who cannot login (I cannot see searchguard-authentication cookies tho):
The size of the ad grouop list is:
someone who can login without issues: 500
soemone who cannot login: 1800