use new config/secrets.yml for devise secret key
use respond_with in groups controller

also made the invalid records in group controller spec actually invalid