add 'each_user_hash' method so that the ldap integration can be used without calling the provisioning API