make sure only admin can delete group in controller

is this what you mean @PragTob ? 
closes #206 

(i'm cleaning it up a bit thou first...)
You double the retrieval of the group with set_group. You could rely on set_group having been called and then just use `@group` for the conditional