using BC-LDAP for authentication