Add user_id filter to GET /groups

The GUI needs the group ids of the user to check access rights. With this MR, it can query GET /groups with user_id to get all groups corresponding groups (full info, not just the ids). Added a test for each user (except user0) and 'invalid'.