Fix some PermissionGroup problems

- isUser renamed to containsUser()
- fixed spelling of removeUser()