fix a NPE when a CN doesn't exist in the LdapEntry

also remove valid looking email check
test to ensure we don't accidently remove future objectClasses