First crack at testing to see if a CLA is on file.

Checks for group membership with the expectation that those users who
have a valid CLA will be part of a CLA group. This implementation
hardcodes the name of the group; a more robust implementation will be
configurable.