#541

- changes to .ini file to disallow org/group creation by normal user
- adding auth function with @auth_sysadmins_check decorator to block
everyone, including sysadmins from creating group members
- adding new tests and restructuring existing ones