FIX: catalog is usable by ALL, that should not be

bug in credentials.getUserDN, that should be a function call, and returns False in case of visitor.