Documentation for recursive groups queries, escaping of queries based on userdn

A few fixes for bugs I ran into when implementing