Fix alias support

this pull request removes querying of LDAP for aliases, and instead uses a static file.  It addresses having to re-authenticate when switching between canonical email address and aliases.  It also lays the groundwork for proper session revocation.