Fix group links on dashboard leading to 403

Fixed permissions by removing an unnecessary authorize!. Wrote tests to make sure this didn't break anything or give access to someone who shouldn't have access.

Closes #663 (closed)