Prevent the ability to scrape for valid usernames

• return the same error message when either bind or the username search fails to find a user
• config variables should use hypen and not underscore