FIX: catalog is usable by ALL, that should not be

bug in credentials.getUserDN, that should be a function call, and returns False in case of visitor.
Merge pull request #150 from sposs/patch-1

FIX: catalog is usable by ALL, that should not be