fixed getAllGroup roles - added test.js to redirect if token fails