TODO @gent:
--remove user from group 
--edit group (!= administrator, helpdesk, manager)
--findByCn throws error if cn not found => how to catch error ?