make sure only admin can delete group in controller

is this what you mean @PragTob ? 
closes #206 

(i'm cleaning it up a bit thou first...)
I like how this is a very general test just saying that we want some kind of flash message :)