Make security token available in LdapUserEvent

When binding the the `POST_BIND` event I found the need to have access to the security token.

I'm not sure if this now makes passing in the user as the first parameter redundant due to being able to access it from the token.