fix sso login and fetch user groups

[srm6867]

1. Fixes sso login by fetching sso-group id from tokeninfo
2. Adds user groups in token

this is how the groups in token looks like -

"groups": [
    "Azure",
    "shubham-dev-1-default-test-member",
    "shubham-dev-1-default-service-admin"
  ]

where

• "Azure" is user group name

• and all others are generated group name based on roles -
  eg - shubham-dev-1-default-service-admin
shubham-dev-1 -> customer shortname derived from keystone auth url
  default -> domain name
  service -> project name
  admin -> role of that user in service project

Use case -

1. Management cluster - the role based group names are used in configuring rbac for tenant namespace.

2. Workload cluster - the group names of user, Azure in this case can be used by workload cluster admin to configure rbac on workload cluster.

[psarwate]

/lgtm