update as per Paul

Author: sevend2

support/developer/webapps/iis/www-authentication-authorization/http-bad-request-response-kerberos.md

@@ -24,7 +24,7 @@ This response could be generated by any HTTP request that includes Windows Remot
 
 This issue may occur if the user is a member of many Active Directory user groups.
 
-The HTTP request to the server contains the Kerberos token in the `Authorize` header. The size of the Kerberos token contained within the HTTP header increases together with the number of user groups used to authenticate users. If the HTTP header or packet size increases past the limits that are configured on the server, the server may reject the request and send an error message as the response.
+The HTTP request to the server contains the Kerberos token in the `Authorize` header. The size of the Kerberos token contained within the HTTP header increases together with the number of user groups for the authenticating user. If the HTTP header or packet size increases past the limits that are configured on the server, the server may reject the request and send an error message as the response.
 
 ## Workaround 1: Decrease the number of Active Directory groups