Clean up initgroups processing for RFC2307
    
    Instead of recursively updating all users of each group the user
    being queried belongs to, just add or remove membership for the
    requested user.
    
    Fixes https://fedorahosted.org/sssd/ticket/478