* account properties (such as is mail crypt enabled) need to be queried and cannot be provided by auth anymore (since auth is now done through login.i.c)
* if an account is an admin is now supplied by saml property