ion auth: create new group, edit group, deactivate user