Add group membership sync

Add groups to the user provisioning request

When I initially prototyped this, the number of arguments being passed/yielded started to get out of control, so I refactored some of the code that was ldap-connection-specific into an `LDAPConnector` class. I feel like this code is due for a bigger refactoring but I wanted to keep this PR manageable so I stopped there.