Acl: Add a helper function to read setting
Acl: Don't autoload Acl.CookieAuthenticate

- Rename Setting key from `Site.autoLoginDuration` to
  `Access Control.autoLoginDuration` since it's more fitting in that category.
- CookieAuthenticate now is only loaded when `Access Control.autoLoginDuration`
  is set. This allows Site Admins to turn off the option altogether.
- Updated baseline/install data
Acl: Force unload Acl.Cookie when mcrypt is missing
Acl: Adding MulticolumnAuthenticate
Adding tests from upstream for HabtmDbAclTest
Merge branch '1.5-acl' into 1.5