#19 - use userprincipalname instead of uid as attribute if uid cannot be found + make auth go through even if no roles are present in database.