Branch v2 1242 force shib login

For institutions with force_shib_login flag enabled users that belongs to these institutions are not allowed to login or register locally - forcing them to use CAFe.

refs #1242