Feature: Paddle.authenticate() with optional post auth filter

[srevenant]

It would be highly useful to include an LDAP filter along with the authenticate, even though the authenticate constructs a full DN. The handiness of this is in being able to do an authenticate+ authorize all in one step, ala:

Paddle.authenticate([cn: username], password, filter:[memberOf: "cn=SpecialGroup,ou=..."])