use the mail attribute for devise authentication so that the cn don't have to be a email