- consistently honor multiple referrals

- return those that failed as referrals
- fix handling of some operational attributes
- fix URI rebuilding (use default scope)
- make copies of o_req_dn/o_req_ndn in case other overlays muck with them