add group membership route authentication