dspace.cfg: Disable webui.browse.thumbnail.*

Despite their names, they are only used in JSPUI, so we can disable
them.
config: Add special group for users logged in with LDAP

When a user logs in with LDAP, we add them to a special CGIAR group
automatically; this way we can do things like limit access to items
or bitstreams.