Update to ldaptive 1.0.2.
SUBTREE search scope is required.

Avoid building filter with string concatenation to avoid an LDAP injection
vector. The parameterization baked into SearchFilter performs escaping to
guard against injection attacks.
CAS-1418 Generalize password policy.

- Generalize some components formerly in ldap-support and pull into core.
- Model password expiration warnings as Messages returned from authn
  subsystem.
- Add a new view, casLoginMessageView, that displays arbitrary messages,
  if defined, after successful authentication. Password expiration warnings
  are displayed on this view.
CAS-1418 Enforce password expiration warning threshold.
CAS-1418 Password policy fixes.

- Refactor AccountStateHandler to take ldaptive AuthenticationResponse
  for greater flexibility to accommodate deployment-specific cases.
- Call AccountStateHandler in both success and failure cases to allow for
  throwing exceptions based on response characteristics.
- Include logins remaining (if present) in warning messages.
- Restore messages needed for some LPPE views.
CAS-1418 Add support for AD password expiration warnings.
Account state handler changes.

1. Remove AD-specific password warning support since that feature is now
provided by ldaptive.
2. Add OptionalWarningAccountStateHandler with opt-in and opt-out support
for displaying password expiration warnings.
Fix typo in default account state handler class name.
Add repository containing ldaptive snapshots.
Add logging per code review feedback.
Fix missing final keyword per code review.
Simplify password policy handler logic per code review.
Honor alwaysDisplayPasswordExpirationWarning config flag.
Add @since for new components.
Use instance boolean flag to trigger warning message display.
Merge pull request #397 from serac/CAS-1418-ppolicy

CAS-1418 Add support for ppolicy and complete generalization of LPPE