sync users from ldap on login

update ldap settings when they change in the connector
hook up new ldap authenticator
try to figure out the email address of the ldap user
do not require a password for users anymore (coming from ldap we won't even store the hashed password anymore)