Make Adding Loc Groups Transactional

[adambray]

If you try to add a Loc Group and it fails (for ex your min length is
greater than max length) it will create the permissions for the group,
but never delete them.

If you go to re add the group, then it will fail due to uniqueness of
permissions.

This should be transactional.