typo
minor change
adopted and slightly modified kerberos context package
changed settings
changed ACI rule, but for some reason ipa refuses to use it
removed kerberos context from init, added more settings for loggers
created decorator in which kerberos context is used when calling ipa plugin commands
rewritten user loaders for login manager to use ipa backend
split principal function
option for Kerberos Realm
Application is logging users based on kerberos ticket. TODO: revise redirects and login initiated from openid endpoint url. Checking users in /id/<user> route