Add and remove roles based on LDAP group membership

Honour the GFilter in the Authentication settings so that only filtered LDAP groups are mapped to roles. User roles are added and removed according to user membership in LDAP groups.