Include NOLOGIN roles in the 'flat' password file. In the original

Include NOLOGIN roles in the 'flat' password file.  In the original
coding this was seen as useless, but the problem with not including them
is that the error message will often be something about authentication
failure, rather than the more helpful one about 'role is not permitted
to log in'.  Per discussion.