I recommend using the latest release of CB Auto Actions and simply using the Usergroup action. If not on J1.6+ yet then you'll need to update more then the _users table as the ACL is stored there and in the acl tables. I suppose that'll work, but it'll run everytime the profile is displayed. You'll want to add a condition to check what their current usertype is to ensure it's not already Author.