fix bug where can add anything to group even users and even if they don't exist