Add exposed ldap tests

src/users.js

@@ -332,6 +332,7 @@ async function verifyAppPassword(userId, password, identifier) {
     throw new BoxError(BoxError.INVALID_CREDENTIALS);
 }
 
+// identifier is only used to check if password is valid for a specific app
 async function verify(userId, password, identifier) {
     assert.strictEqual(typeof userId, 'string');
     assert.strictEqual(typeof password, 'string');