Issue_37: authorization spec for User management
Issue_37: group, membership models
Issue_37: groups controller
Issue_37: fix typo
Issue_37: many to many relationship
Issue_37: CRUD actions and views for Group
Issue_37: allow mass assignment
Issue_37: show 401 when user is not authorized
Merge remote-tracking branch 'origin/issue_37' into production