LDAP: only connect to LDAP once on login