Delete works but messaging is wrong.  Change removeGroup() in the DAO to take a string.
CORS needs to specify allowed HTTP methods (not sure why this wasn't needed until now)
Fix response handlers for DELETE