Customize tokens returned from Okta with a Groups claim