Fix a bug and add more prefixes

Add "unconstrained-ok" and "fast" name attribute prefixes.

Also fix a bug in the handling of local-login-user.

Add code to validate username with aname2lname.

Add option to use DNS or not for domain/realm validation (!"fast").