Investigate whether 'groups' must be added to OIDC scope to obtain a user's groups

From https://github.com/MatthewJohn/terrareg/issues/3

We have tested a working OIDC implementation with Okta, but had to add 'groups' to scope.