Nested groups support

Added support for nested groups in ldap_get_groups().
Authentication group filter

Added the possibility to specify a list of groups a user must be member
of to authenticate.