ensure even authenticated users' groups have a "gist_id"
fixes #14