Expose group memberships via /user/details call