it would be safer if we added an additional check in the remove member page to make sure that the current user is the owner of the group