authenticate as a member of a group

Define that a user must be logged in and have the proper permissions to
access a route