MDL-41315 assign: Dont show users not in the current grouping

This is for separate groups mode. Note - this will be slower - but
this feature is experimental and groupslib does not provide a nicer api.
MDL-41315 assign: Add unit test for groupmembersonly