expose slap_sasl_matches() to allow external matching of authz* stuff; fix...

expose slap_sasl_matches() to allow external matching of authz* stuff; fix backwards compatibility bug for "dn:<pat>" as a shortcut to "dn.exact:<pat>"