Force the login link to load in a new page
Add shib auth role
Remove login end point; we just use /logged_in instead from Plone
Tidy up embedded login portlet and configuration
Users get the role when logging in
Add readme documentation on aspects of authentication