Add test coverage to course groups app

TNL-21

@jimabramson @andy-armstrong 
It turns out a permission failure raises an `Http404`. Everything else returns 200, except when requesting users in a cohort with a bad pagination value, i.e. asking for the -1th page of users.