WIP on LDAP, moved req handlers from app.js to routes