Updating moderator status on LDAP login

Fix for #73. Adds a new method to the `User` model object that allows moderator status to be removed. LDAP logins now check the moderator group on every login rather than just on create.