Added a little bit of security in Groups controller, especially access right checking. Added presense constraint on group. Added visibility (public/private) in invitations view and groups view