add ldap auth method, and disable all other user auth methods
add some missing header
force ssl at the login controller