add security to group details
ajax authentication within main usecase