add joinPhase rest endpoint

fixes #3.
@zachmullen here's where it was

should I have used (as I did)

    if 'groups' not in user

or done something like

    groups = user.get('groups', [])