Thank you for quick responses.
I checked the token cache and it showed the correct groups. I also did a gpresult and that showed the user was in the correct groups. As I said it something group related, because it works without IF INGROUP?? I am stumped..