fixes #3312 - support /users/extlogin as a login page based on REMOTE_USER