visiting groups requires authentication