fix: check group before list account
fix: don't give access to anonymous and fix logout