New group request should automatically request a cloak namespace by default

Having a user submit a group request and get it approved and then having to submit an entirely separate request for a cloak namespace is clunky and tiresome. Better would be to do the cloak namespace at the same time as the main request goes in.  

Either that, or the UI to get the cloak request in at the start is unclear.
