refreshing from LDAP now updates email address, and updates the cache when last name or display name suffix change