Fix for OPENDJ-1160 : Write operations to non-groups force groups to be reloaded.
The refreshToken was updated on each add/mod/delete regardless of the type of entry, causing intensive contention on group membership evaluation.
Changes include reduction of the critical section as well as moving the update of refreshToken only when groups are modified.
CR-2400, thanks to the nice reviewers.