PAM additions mostly for a gateway situation

- Configure if login is allowed when group is missing
- Additional PAM login error text can be configured
- PAM error gives readable error in a gateway setup