Cas will check if a user is part of any groups and or is pending user.

This change is related to https://github.com/georchestra/georchestra/issues/581.  With this change users can only login if:

* Their username and password is correct
* They are not part of the PENDING groups (PENDING is configurable but default is PENDING_USERS)
* They are part of at least 1 group