Assigning user groups based on groups claim cannot be disabled

[stevenbal]

Currently the backend always tries to override user groups based on what is present in the groups claim, which makes it impossible to manually assign Django groups to users (even if the groups claim is something that is not in the token).

It should be possible to enable/disable this group assignment with a checkbox (or it should be possible to leave groups claim empty and skip the assignment that way)