Ignore case when resolving Group from groupDn.

Since ldap distinguished names are case insensitive, our group dn resolver should be also.

@frett 
err, .endsWith(), does that method exist?