update specs; detailed behavior of #add_member and #remove_member will be moved to conjur-api