make sure only admin can delete group in controller

is this what you mean @PragTob ? 
closes #206 

(i'm cleaning it up a bit thou first...)
Stuff about `@group` applies here as well