Fix a security issue with LDAP usernames