fixes #3493 - check if auto user reg is allowed for auth source

source.onthefly_register wasn't checked anywhere, so ldap users were always automatically registered.