fix potential csrf in troupes page, update my readme, make leaving and joining groups work