Support groups filter with oidc

[andrewstuart]

Oauth2-proxy supports looking for specific groups in requests. The controller
should allow proxy instances to easily specify the groups that should be allowed
through that proxy instance.