refactoring to remove ldap user mgmt out of users model