by hunmonk: add an 'Override destination paramter' setting, enabled by default. this gives admins the option to allow LT to force it's redirect paths over a passed destination parameter. related to solving #604492

#291006 by hunmonk: Email validate link landing page inconsistency. see logintoboggan_update_6001 for details on this change.

#57623 by hunmonk. Bring back set password only option. Add optional 'Immediate login' checkbox to logintoboggan settings page -- user is only logged in automatically if this is enabled.

#83273 -- Improve password validation. patch by hunmonk.  make password length validation optional, and configurable by length.

moved all login block functionality to form_alter functions. created a separate logged in block. revamped email login validation check and got rid of custom lt login validation.

78247 -- move profile values into profile_values table.  migrated profile values from users table, data column, into proper place in profile_values table.  this was caused by a bug in the LT registration function.  also fixed LT update 2, which was corrupting the user data by inserting extra escape characters.  NOTE: if you ran a db upgrade on LT between March 13th, 2006, and August 16th, 2006, the serialized data in the data column of the users table was corrupted!  it's either missing necessary curly braces, or has extra escape characters that prevent the data from being properly unserialized.  custom repair of that data will be necessary if it needs to be recovered.

disallowed selection of the anonymous user role as the pre-auth role--the new handling of roles in core makes this setting impossible. set it so the update code will automatically move the pre auth role to the auth user role if it is currently in the anon role. site maintainers are encouraged to create a new role w/ the same perms as the anon role, and set this new role as the LT pre-auth role--this will allow the same functionality as before (in this case it will also be necessary to manually add the new pre-auth role to any users who were unvalidated previous to this change.

#57623 -- Eliminate set password only option. the option to set a password but not login immediately seemed useless, so it is now removed. refactored the register_submit function to make it more clean as well.

inital commit of install file.  fixes security issue where conf_pass and conf_mail vars were being stored in serialized user data.