Restrict lunch creation to groups
Fixed url
Todo...