The authenticator should use bindDN as user DN instead of searching for it

In case the bindDN is dynamic it's important to use in case the LDAP server contains several entries with the same uid. It might also improve performances a bit.