adds initial route for groups api
updates groups controller with first working specs

 - adds guard
 - uses active model serializers to convert to json