Allow to check ldap user against more than one group

[elacour]

Previous code allows to check one ldap group membership before allowing user to log in RT. This PR allow to check against multiple groups. The first group that matches allows user to log in. It's of course backward compatible. Previous version made the "group" configuration a string, this one allows a string or an array.