There is a part of the URL groups instructions which is unclear. The part where in the screenshot you can see /.* after the URL. But there is not explanation of what that is and does.
I was having problems getting the URL groups to work. I thought I got it to work using .* but now it isn’t working again. I logout, but when I click on a link to a page which I thought I protected with URL groups, I still get access and somehow get logged in even though I already logged out. I cleared my cookies, but it still happened/