plugin load order adjustments, and configuration updated to use correct 'Plugin::Authentication' key ('authentication' was the legacy way)
short-circuit with a redirect to the homepage if the session is already logged in
support very basic logout functionality (just log out the session and redirect to homepage - no frills for now)
display login error message if present