Change to how users authenticate and how sync happens

Previously user roles was based on AD groups, this has been replaced by
AD user properties. The Sync Users module on the admin/settings page
now looks at AD properties and sets roles accordingly. Then during
login the login script looks at the role in the SQL database.