LDAP group management

[tazjin]

Auth should be able to let people administrate LDAP groups. Ideally people could be assigned as group admins and have the ability to add/remove people.

We may want to give people the ability to request group membership in the future.