Add the forceExternalAuth option

Without this option (or when it's set to false), murmur's default authentication will kick in when your external authenticator plugin crashes and basically allow *anyone* to login and register.

When it's enabled, murmur will instead return a temporary login failure to the client.