JSUTIL-218, corrected user handling, was broken with new user by key only processing, did not work for external directories like ad or ldap