add and remove users to groups with validation code