Admins can no alter user groups. Fixes #23