- require all granted defeats the whole purpoese of auth, remove it
- comment out ldap example
- move directives around for readability
- rel 4