You are again running into problems due to the reserved word. The recordset returns the column name as "group". However, when setting the session variable you are using the local variable which is now """group""" to reference the field name:
CStr(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value)
which is not in the collection.
If you can't change the column name to a non-reserved word, you are going to have to modify the generated server behavior code.