add help text in edit form
- support external affiliation cn, url in person record
- new field privlist to flexibly define privileges