making sure $params['group'] is actually an int group_id
Merge pull request #1 from micahflee/master

$group_filter isn't getting sanitized before executing SQL