When updating user membership, the authenticator is manipulating directly the cache cached XWikiDocument. This is a very bad practice because some other thread might be manipulating the same document at the same time.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.