add initial support for ldap auth