added NoopLoginController for iframe login for auth schemes that use a
web form from an external server to authenticate, but don't integrate
deeply with Spring.

Altered OgpConfigRetriever to access properties not defined in the
properties object.

Made a few changes to the default security-app-context.xml, such as
disabling http basic auth.