set AD user props internally
remove AD user lookups from the canHave checks
trim and optimize the canHaveAccount code
trim and optimize the canHaveLoginForm code
group membership mapping works!
remove some debugging code
documenting
improve the skip handler
ionitialize canHave object props from session
remove overrides for some functions
fix up some docs