plugins - added filter:auth.init hook to add additional login strategies; fixed callbackURL