Refactor auth to dynamically generate the login/logout resources

This eliminates the need to update these resources on every reconfig.
maybeAutoLogin doesn't need to return a value
(WIP - need tests) remove unused authenticateViaLogin