Fixes #391. Allow admin users to directly add users to a group

ping @cjh1 @brianhelba