Change group sharing/public link logic

Re #634, this is a test that describes the current behaviour - I'm not sure that 200 in the middle is expected behaviour when SENTRY_PUBLIC = False, given that in the third case the link requires login.

[edit] This pull request will change SENTRY_PUBLIC=False into a kill switch that prevents groups from being viewed by anonymous users.