More flexible LDAP and default ACLs

Hi,

These changes support
1) more flexible LDAP authentication - so that this can be used with LDAP other than Active Directory.
2) allowing group membership in LDAP to set the ZKUI role rather than having a list of users.
3) setting a default ACL that is used for the creation of new nodes and properties.