Implementing group restrictions

This patch add an new optional option 'group' in rights configuration file.
If specified, group membership of the user is verified before access is granted.
This need an auth backend implementing group membership. This patch implements
it in PAM backend ; implementation in LDAP backend is planned.