It feels wrong adding this by default. We could either set this setting after we imported the local settings and decide what we need, or leave it out and document it. The latter doesn't allow for quickly switching between autologin and browserid.