Account state handler changes.

1. Remove AD-specific password warning support since that feature is now
provided by ldaptive.
2. Add OptionalWarningAccountStateHandler with opt-in and opt-out support
for displaying password expiration warnings.