refactored plugin and auth init a bit, and fixed issue where successive reloads caused old login strategies to be inadvertently preserved