#12 #13: switch from devise_ldap to just devise. simplier code, however, need to implement group membership checking