Make sure ldap_only conf parameter is passed to login template