Summary

Closes #2577

In some weird set of circumstances, it appears that users can call the api/v1/groups/member endpoint while not logged in.

Steps to test

Neither I nor @brianhatchet have been able to replicate this locally.

Estimated Regression Scope

Not really much I can think of. It's just adding a logged in check to a function so that an endpoint with no purpose for a logged-out user, isn't called when logged out.

added scoped labels

added scoped label and automatically removed label

@benhayward.ben looks like some other stuff got put in here. Can you cleanup before we merge?

assigned to @benhayward.ben