Add options to retrieve LDAP group membership

This change allows the user to configure an additional query that will retrieve the users LDAP group membership and populate it under the "extra" key in the returned auth hash. This is implemented in a way that is very similar to how the filter option was recently implemented. Tests and updated README included.