feat: check access token for group attribute as well; fix #43

[hahahannes]

This will add the feature of checking the access token for the OIDC_GROUPS_ATTRIBUTE. This is useful for cases where the needed value is stored in the access token and not in the user info token