Employee selection is allowed on editing LR (#6069)

1) In show lr template added check if lr id is not empty
disable request for.
2) Leave controller showLeaveRequestAction modified
to check if single LR was changed to MLR.
Update user security identity on username change (#6066)

1) New function created in acl manager to update users
security identity.
2) updateUserSecurityIdentity function call added to
user controller to update user ACL when username changes.
FIX: Employee leave date validation

1) Employee leave date validation modified.
Validation was failing when leaving date field left empty.
First login listener bugfixes (#6195)

Checking the currents request path changed to getPathInfo.
getBasePath was not sufficient to check on the secured area path.
New check on user token added, bypassing the listener if not a
UsernamePasswordToken.
Token condition fixed to support anonymous token.
Listener extended to bypass if user ldap authentication is enabled.
Authentication leaving date extension (#6155)

User entity changed to implement AdvancedUserInterface.
New inactive user listener added disabling users whose leaving
date passed.
Ldap authenticator class updated to properly handle deactivated
users during a session (redirect loop).
User checker service added and implemented into ldap authenticator
to handle inactive users.
Main authentication process split into methods.
Unused webservice user provider and user classes removed from
user bundle.
Ldap enabled setting moved to parameters config (#6197)

User bundle config changed to use parameter "ldap_enabled".
Redundant parameter setting removed from opit hrm DI extension.
Twig extension globals changed to use get parameter.