Add basic mention functionality

This checks that

- The result filters by the query parameter
- The result filters by group id
- the current user is authed to see group members