Fix query in User#authorized_groups

Child project members of an invited group are not given access to the
inviting group. Only direct members are given access.