Authentication configuration documented
https://www.pivotaltracker.com/story/show/74864188
[#74864188]
Rename ldap.group. to ldap.groups. to get a cleaner and more consistent config