* Refactored configuration.
* Added support for:
  * supress-cookie-on-new-auth
  * supress-redirect-on-new-auth
  * append-auth-to-urls
  * always-allow-read-requests