Fix welcome controller permissions, display on groups