Removed ldap_userattr matching to allow multiple UIDs of a user

Basically are we ignoring the userattribute now and plainly depend on the
search filter to match the correct user.

Additionally requiring the token __USERNAME__ in the ldap_filter_user setting.

refs #4197