issue #4: finally lock down on how to restrict access to a group, however, currently the admin user/pass is required and written in config/ldap.yml; need to change that later