fix(group-manager): Group.save() supply updated owner object

 * use .updateOwnerData() instead of post hook
   should post hook be removed?
 * update tests
 * write jsdocs for User.can(), User.isAuthorized() and Group.save()