ACT-1696: first cut of ootb LDAP integration
ACT-1696: cleanup
ACT-1696: introduce ldap group caching