RT service filter non valid users
Created by: stavamichal
- because RT service is similar to loading data from LDAP, only valid memberships have to be part of it's data, skip non-valid memberships
- add sorting of values in EPPN and Groups
- process every meta.cesnet.cz identity found in the user's EPPNs, not just the first one