Only allow people to add passwords to groups they are in
Fixes #40