Additional states

Updated the "expired" state: it is now called "limited" and for local_unix backend it means the user cannot login via ssh, i.e. changed shell to nologin.