Fix privilige escalation

Users now need to enter the password of the account they want to group
with if they are trying to group to a password-protected account. This
fixes a very minor privilige escalation issue, allowing an user more
access to an account than said user should have.