Allow listing members of a group from the REST API, i.e. /group/{groupId}/list