HTTP & Traveler Security Issue

I have secured the HTTP server and the Traveler access by adding a group to the Security - Server Access - Access Server field and setting the Ports - Internet Ports - Web - Enforce server access settings to yes. I have also used the same group in the Lotus Traveler - Lotus Traveler Access - Access Server field. The problem I have is when I add a new user to the group, they get an error 500 when the point their iPhone or web browser to the website to install Traveler, even if I wait a couple of hours, the sever security does not seem to refresh. How can I secure the HTTP server and Traveler access by using a group.