[AS7-5737] Fixed referrals traversal for roles stored in LDAP referral.
It needs new version of PicketBox.
Variables need a $ in scripts to retrieve the value.