Update opauth config

The path was a bit strange as a default?
Tweaked the callback for the example (coming in next commit)
Security salt is now the same as the default in opauth, because this is checked. This forces people to change the key.