add: default group option for ldap authentication, and a warning label in the ldap configuration form