Added ability to 'turn off' ldap on per user basis'