Updating the pull request in light of comments

- Removed the Legacy strategy completely
- Moved the strategy to an aspect of the security realm
- Separated the strategy for Users from Groups because... well it might be necessary for some
- Moved IdStrategy from inner class of User into top level class