Fixed logged in user being able to edit other user's groups if they can guess the id.