Allow for authentication and authorization when users aren't all in same OU

modifies authentication to do a search for user DN before pulling attributes, rather than assuming all users are in the same OU.  Modifies authentication to use userprincipalname for login instead of full DN.  This must be changed to match the upn for the domain in the authentication.php settings file.