Added authorization, so that only admin can assign and unassign rooms to group, ref #16, ref #41