Updated package_create auth function for #59

- Makes sure the group in the package data_dict is '' and not ' '
- Allows publishers (in a group) to succeed in the auth call if the
  group name for the publisher is not set - it will be caught by
  validation.