mod_firewall: Load marks from storage on demand rather than at login This ensures people who don't use marks, or use them infrequently, don't pay a perf cost on every resource bind.

This module helps make BOSH and WebSocket connection endpoints
discoverable via the HTTP method described in
[XEP-0156](https://xmpp.org/extensions/xep-0156.html#http).