Added check_all param to in_group

I expect `in_group` to check presence of the user _all_ the groups, rather than the current behaviour of checking the user is in _any_ of the groups.

This pull request adds this functionality via a param that defaults to the behaviour that currently exists.