Fix checking for group membership

In fact security.py wasn't the problem since it returns Groups, but
instead provider.get_group_by_people_membership should returned only
Groups for which the user is approved