also it will be nice to move ldap auth logic to separate method