Check for valid cname when sync'ing

When using this to sync an ActiveDirectory, I found that some queries would pull 'users' that had no CNAMES, which causes the items() call to fail. This check allows the synchronization to complete by catching and skipping these cases. Might be useful for others.