#12 #13: add group membership test when loggin in. prevent unauthorized users (not member of group) from loggin in