Photo sync not working in SSO mode

thumbnailPhoto is not importing from LDAP Authenticator when using SSO (didn't test without SSO).

Looking at debug the LDAP query for sAMAccountName= is using REMOTE_USER instead of username:

.XWikiLDAPConnection - LDAP search: baseDN=[DC=DOMAIN,DC=COM] query=[(sAMAccountName=DOMAIN\5cJSmith)] attr=[[thumbnailPhoto]] ldapScope=[2]

instead of:

.XWikiLDAPConnection - LDAP search: baseDN=[DC=DOMAIN,DC=COM] query=[(sAMAccountName=JSmith)] attr=[[thumbnailPhoto]] ldapScope=[2]