refactor, add fields to User factory
add rack_session_access
user can view groups page