add groups header for conveying group memberships for use with Matrix-based security