Better dansguardian support for external AD auth

See changelog for details.