add ldap:check-user to check user existance on the fly