Fix ldap.yml:  we don't allow password reset to LDAP server (ldap_update_password=false);  then we have not admin password in the ldap.yml.
Snippet for logout
Danger messaging.
Rescuing not authorized action.
Pundit stuffs.