Flag and hook

• Add MigrationInProgress config to disable the extension if needed
• Add hook handler for PluggableAuthUserAuthorization so we can catch new users from LDAP