Ignore case when resolving Group from groupDn.

Since ldap distinguished names are case insensitive, our group dn resolver should be also.

@frett