the username in mongodb must be whatever the user entered.
we don't currently map usernames to arbitrary ldap keys