minor fixes on group-manager; introduced promise-returning User#can as wrapper of Group#isAuthorized
refactor group-manager: added mongoose-schema-extend for Group models to extend a base schema