WIP groups: API addition

yes and put in the model the auth checks if is required.
In `api.py` call the `join()` and catch the exception if required.