add function fnRestAuthUserNeedsRefresh
auto-add groups that don't exist yet
add README with todos