Add note about "AD_USERNAME_SUFFIX" to sample config.

Admins should let these settings empty unless they are in an AD forest
environment. In this case they should consult the detailed installation
instructions / manual.

refs #203