Before, we weren't releasing the connection properly.

Simply by setting an empty bind DN.

Also simplifies handling of the connection pool itself, switching to
using deferred connects, and adds a test suite for misbehaving LDAP
servers to exercise failure modes.