patch to basic_ldap_auth.cc to add an authorization control