Add test coverage to course groups app

TNL-21

@jimabramson @andy-armstrong 
Is there no way to get a different error code? I vaguely followed the HipChat discussion that invalid requests return 200 and success false, but with a message. I would probably add a comment to make this clearer.

Presumably a permission failure would cause a different error code, so can you add tests around that too.