Minor adjustments to the settings page

Rename Security to Auth/Security in configuration settings.  Move fields regarding authentication/passwords to Auth/Security.  I felt that password policies, totp, remote_user and checkbox to use LDAP auth should all be together in one place.

I also changed the label on the child Services entry to Service Settings to help distinguish it from the Services label below it.