Issue 551 - Returning 401 on group profiles that should be hidden and are not joinable.

Also added `canJoin` property.
Expanded the JSDocs on getFullGroupProfile as per @mrvisser's PR review.
Merge pull request #551 from simong/issue-551-group-rest

Make the group REST api more inline with the other APIs + add a canJoin property to group profiles