Ignore case when resolving Group from groupDn.

Since ldap distinguished names are case insensitive, our group dn resolver should be also.

@frett 
shouldn't this be .startsWith() and not .contains()?