Security Fix.  Blank Passwords will bind any user to Active Directory if anonymous binding is allowed at active directory.   Added require_password to ensure blank passwords do not bind anonymously to Active Directory and return true.  This switch can be added into the yaml file as require_password : true.