Fixed off-by-one error when trying to cast attribute to ascend

This fixes the bug described in #843
Typo fix in comments

completelty => completely
Merge pull request #844 from qnet-herwin/ascend_parse_filter

Fixed off-by-one error when trying to cast attribute to ascend
Fix spurious LM-Password / NT-Password warnings
And don't complain about LM-Password if we have NT-Password
Fix another spurious warning
Formatting in cursor.c
Breakout PAP header processing function, and add some tests
Only complain in PAP if the Auth-Type != our Auth-Type
Use correct escapes in the tests
Enable control-socket by default, but only for root
Revert "Enable control-socket by default, but only for root"

This doesn't work on OSX.

This reverts commit 7eadf64919d046216a3d9c6504b6aa9d2f037b57.
Be more generous about values for correct escapes
Skip both characters, not just the escape.  Closes #842
Enable "most recently started" for connection pools.

And remove "spread".

MRU based on last *release* time is bad.  See the link
below.  MRU on last *start* request time is much better.

https://code.facebook.com/posts/1499322996995183/solving-the-mystery-of-link-imbalance-a-metastable-failure-state-at-scale/
re-implement spread, it's still required for rlm_yubikey