More stringent front-end connections between group association and folder types

Namely, don't allow newly created folders to be associated with groups other
than the one that the group is being associated with.

This is on the front-end only. Server side protections should come next.