Added a claims authentication manager to translate AD groups into role claims