added a missing optional parameter to validate-cas-group-membership