Mp/ldap secure

this PR adds secure (start_tls, simple_tls) ldap support as well as cleans up the error handling around ldap failure modes. 

ping @opscode/server-team 
Is this supposed to result in an uncaught error?