Add ability to sanitize username per-ldap-server on login

This allows to login using an email address to ldap servers
which require only the username part.

Signed-off-by: root <root@ops.squiz.co.uk>