s4-samr: Rework GetGroupsForUser to use memberOf