config: Add special group for users logged in with LDAP

When a user logs in with LDAP, we add them to a special CGIAR group
automatically; this way we can do things like limit access to items
or bitstreams.