Thierry Sallé authored Feb 23, 2016 and Thierry Sallé committed Dec 12, 2016

- adds the option to use ldap groups for authorization in combination with an auth proxy
- adds an option to limit where auth proxy requests come from by configure a list of ip's
- fixes a security issue, session could be reused