allow user to specify the ipa server realm

- this adds to the cli and appliance_console
- realm is also passed to ssl certificates
- better display of error messages