Implement the LAVA backend
This is considerably simpler than it might be, because LAVA exports the API we want - set all the groups to which a user belongs.
The main complication here is that LAVA uses basic authentication, which means we need an XMLRPC library which supports setting this header. The majority of go XMLRPC libraries I looked at did not seem to support this.