Added support for fetching groups in the SURFconext authenticator