Add option for expiring certs

Added lost password function/framework

Fixed ssh config, to create a working config
Minor change to use 'vpn-' instead of 'nak-' prefix

fixed exception that prevented the password policy command to complete if any of the users didn't have an eamil address

cannot found the underlaying share anymore (becuase it is
probably deleted)

* Changed labels to reflect LDAP Groups better in the interface (and not abuse the word "share" for that)

well tested API controller and small fix in LoginForm that didn't return the correct value upon login