[changelog] Add a flag for the user to be able to disable LTI
authentication altogether