Allow users to login using LDAP if they have an account already with the "staff" role, or they are on the whitelist of allowed users