modify ldapweb.cgi to restrict account creation
ldapweb.cgi currently allows account creation in multiple LDAP subtrees based on
the organizationthe user selects. In future systems we will want much more
control of accounts that are created in particular subtrees (such as NCEAS), so
we need to change ldapweb.cgi to only allow account creation in the
"unafiliated" subtree. The script should check input and make sure that
unaffiliated is chosen and send back an error if not.