add users to LDAP immediately #302
Description
This is required for non-unity users to allocate resources from Coldfront. This can also revert #244. Such users should also not be confused by the "new account" page telling them to join a group when they don't actually want to do that. Such users must not be added to the unityusers LDAP group until they get PI access.