Improve error reporting when the user is not in oidc.groups.allowed

When the user which will log in are not the group specified by oidc.groups.allowed, he will see only an internal error 500. And his session create on the IDP will not destroyed, this can be an security problem. See more here.