clarify OMERO groups for LDAP-using sysadmins (rebased from dev_5_0)

Make it clearer to sysadmins that OMERO groups are not necessarily LDAP groups.
--rebased-from #839