You shouldn't need the "/api/group" prefix.  We are attaching the prefix on the public calls, but that currently gets removed as it gets forwarded.