Makes login(String user, String pass) work properly.

* Now it don't look up credentials in the usermanager framework, unless
a user is logged in (the problem in bug 3576)
* It also gets the values (e.g. the default value for the authorization
server) from plugin.xml