modifid code to take advantage of --derive option on ldap.find_user_by_email()