Group server now checks tokens for all actions other than connecting and getting a token. For obvious reasons, those do not need to be verified. The issues where deleting a user from groups twices ruins everything still exists.