Support ldap login with start tls

[ccl0326]

as title.

[baryluk]

I can pick this up and address the remaining issues. I agree, it should use .get() so it works with existing config.

I also would like an option to ignore server certs / name. I have a prototype code to do that.