Simplified rework of ERP5 User Manager without module-level callables and
implementing more of PAS API.
Implement IAuthenticationPlugin API better, so PAS API becomes usable for
ERP5-based authentication.