[api] some testing for addrequest
[api] revoking a group puts requests into new again if they have reviews
[api] some more testing for remove