Make LDAP sync on login configurable