fix bug with non-logged-in user attempting to access groups