Make CSRF check function available without decorator
Better variable naming in login_form

Use `login_types` instead of `login_titleandtype`.
Don't skip authentication in tests by default

There's no good reason to skip authentication by default, and above all
it makes testing authentication itself impossible.
Add Shibboleth related data structures
Add Shibboleth doctest and views
Do not use webserver-set REMOTE_USER HTTP header
Add shibboleth userbadge mapping
Configure test.ini to include Shibboleth stuff
Merge branch 'feature-359-shibboleth+++' into develop

Fixes #359.