make sure only admin can delete group in controller

is this what you mean @PragTob ? 
closes #206 

(i'm cleaning it up a bit thou first...)
ah ok. I was writing it like groups_path. Group overview works too.