group auth; v1 api handling; user group update