added pam_localuser.so since this is a default option in RHEL6 (untested elsewhere)