adds ldap support
adds user impersonation