Cas will check if a user is part of any groups and or is pending user.

This change is related to https://github.com/georchestra/georchestra/issues/581.  With this change users can only login if:

* Their username and password is correct
* They are not part of the PENDING groups (PENDING is configurable but default is SV_PENDING_USERS)
* They are part of at least 1 group
Pending user name -> PENDING_USERS
Merge pull request #711 from jesseeichar/pending-user-not-authorized

Cas will check if a user is part of any groups and or is pending user.