use LDAP privileged bind in account creation

[abizer]

in #140 we had to remove verification against the berkeleyEduAffiliation LDAP attribute because anonymous access was going away. Now, we've received a privileged bind to access the attribute again, so we should re-add support for verifying member affiliations with the privileged bind.

[kpengboy]

Also, it would be nice to supply these credentials to the check script so we can continue to see affiliations there. We would want to make them at least staff-only though.

[abizer]

partially addressed in ocf/utils#86

[cg505]

I think we can close this.

[dkess]

This isn't implemented. We should probably do it soon though...

[cg505]

I can't read, my bad.

[dkess]

Resolved with #157

[dkess]

Why was this re-opened?

[ja5087]

My PR for this needed to be reverted back in Feb. I'm working on a PR that hopefully doesn't break other services so just keeping it open to indicate it hasn't been resolved yet.