Mp/ldap secure

this PR adds secure (start_tls, simple_tls) ldap support as well as cleans up the error handling around ldap failure modes. 

ping @opscode/server-team 
Continuing the comment on the error, should we return the Reason for the error so that it is in the crash logs when the process eventually crashes?