group update/create now works for non-admins