This commit fixes the fact that adding a default admin_group in an after_create callback wasn't saving.

It also added back coverage for CRUD abilities but now uses more Hydra default permissions

Had to re-record VHS tapes for new interactions.