LDAP auth fixes

- Mirror email attribute
- Add group search filter