PWM incorrectly uses search operations where it should be using compare operations

[quanah]

When doing group membership comparisons, PWM incorrectly does a search operation to see if a entry belongs to a specific group. It should instead use the ldap COMPARE operation, which is faster and less resource intensive than the search operation, which is why the compare op exists in the first place.