#91 Allow match on userDN in LdapLoginModule

[Scott M Stark]

Added matchOnUserDN option flag to allow one to
specify that user roles should be matched against the
full user distinguished name rather than just the
username. If false just the username is used as the
match value. If true, the userDN is used as the match
value.