use our fork of omniauth-ldap for 'search_opts'