which is like standard POSIX. Existing AD group support should also still work
(but has not been tested as I don't have a working AD setup).
Added support for the group check to the login code (which was still missing)
Improved the user experience by only dumping a newly created user on the profile
page when the e-mail address was missing.
