Behaviours group condition doesn't check for anon users

When checking if the current user is a member of a group, Behaviours does not first check if the user is anonymous (i.e. null). This leads to a NPE.