[Auth] Fix: "Auth"-key is duplicated in module.config.php

This bug caused the ["Auth"]["external_applications"]-Array to be overwritten, so
external logins always resulted in "Invalid application key"-errors.

The HTTP-Status-Code 403 will now be send upon failed logins.