add (experimental) support for LDAP authentication