login fixes
- user can accept ToS even if account is not activted
- only send email first login when using external provider
- don't show notify error for selections if not authorized (accepting ToS).
- cleanup CHANGELOG.md
Merge pull request #1246 in CATS/clowder from hotfix/add-comment-to-ldap to release/1.4
* commit '938da0fe8acfe1a670300ebefb99d5b3c00d0847':
add comment in ldap