added groupId test for new users, typo, authorise needs component param

Please review.

See also https://github.com/Fabrik/fabrik/issues/1281

It's still up to the developper to prevent (a non-admin) user from modifying other users' params.