Enforce CREATE_GROUP permission flag

Logged in users of all roles should have the ability to create a group. This should just be a replacement check for the existing add group functionality