Use an exclusive lease for LDAP checks
Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/14134
Merge https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3140 first.
Only perform LDAP checks for a user after acquiring a lease. Checks during user login do not require a lease.
The lease has a fixed expire time of 10 minutes.