initial group admin page and access helpers
extracted auth helpers into concern