Add REMOTE_USER_GROUPS to ClaimAuthFilter