Added support for STARTTLS with LDAP

New config value 'ldap.start-tls' (defaults to false) for STARTTLS
support over LDAP