refactor auth/group
refactor auth/group
refactor auth/group
sec svc