Fix issue #16 Hide 'Groups' if the user does not have permission

Fix https://github.com/cloudspokes/direct-app/issues/16
-add TCStaff check
For 'group' menu, it evaluate by custom tag 'isSecurityGroupsUIAccessible' on every page, while SecurityGroupsTcStaffOnlyInterceptor only execute under /group namespace