ldap authentication fixes (mostly readability)
auth ldap: lookup email aliases when finding local user
ldap auth: do not reset user password when logging in with ldap

user may have password already set in database, i.e by previous login method
code comments, cleanups, simplify
auth ldap: reorder emails to allow ldap and eventum "aliases" to match
Merge branch 'ldap-auth'