invite_to_group fixed return users list, don't return password digest