changes to do permissions check in seagull and use tidepool-armada-client for groups lookup