Use OnConnection query string to add group membership rather than making an additional call after connection.
Changes in architecture to support authorization and temporary workaround for NTLM in Firefox (to be removed in SignalR 2.x). Thanks to @davidfowl