Fix #16: Include Primary Group for AD Users

Caches group SIDs and retires unmanaged SID transform PInvoke for
managed equivalents