Check for the "noanalytics" userright rather than hardcoded groups.

This makes it easier for system administrators to exempt custom groups of users
from tracking. For the sake of backwards-compatability, I've left the current two
options for groups still active.

Change-Id: I042d55dce8d397cf1c281e3ac96ceb8cce96d0a9