Take care of arrays in extended attributes (includes a patch from joshtaylor)

Only use extended attributes which are well known in user model (see comments from joshtaylor) and take care of array values. The cas server may send an array as an extended attribute, especially if ldap is used for authentication.