Simple ad groups to django flags mapping

Previously we had "intelligent" mapping. If user was superuser or staff it must be active. Now it depends directly on ad groups assignments.