pfSense

Allow group authentication for NoIP dyndns service.
Extend information for service NoIP to replace ':' in username by '#'.
Allow '#' in username.

Correct IPsec P1 Child SA Start Action validation. Fixes #11576

Add spinning icon to IPsec status wait message

Add IPsec GUI control for Child SA Start Action. Implements #11576

Skip expired DHCP leases for ARP table content. Fixes #11510

Improve Captive Portal redirect URL handling.

• Fix handling of after auth redir URL value so it gets properly
  respected as stated in the GUI. Fixes #11842
• Fix up and optimize the redirect code in general, there were several
  ordering issues (using values before they were set), logic problems,...

Load MAC OEM list when preparing ARP table. Fixes #11819

Moved web include files from /etc/inc/web to /usr/local/pfSense/include/www

Show Unbound used certificate on the Certificate Manager page. Fixes #11678

Note says that gateway or failover gatewaygroup are valid options #11164