initial take on migrating group permissions
fixed comment to point to the right task
a few unit tests for group permission migration