add pam_cgroup.so to /etc/pam.d/sshd

Add pam_cgroup.so to /etc/pam.d/sshd so that ssh logins by app users will be placed in their group before executing the oo-trap-user shell