LDAP: also try MS AD's thumbnailPhoto when looking for an avatar image
LDAP: improve debug message