fail if ldap fails (another check). Don't allow full emails as usernames