Address LdapAuthenticationHandler code review feedback.

Add allowMultiplePrincipalAttributeValues flag (default false) to handle
duplicate principal ID attribute values.
Misc code cleanup.