Issue9

Moved the setting of forced auth and passive to constructor of the LoginHandler rather than per request. Updated unit tests
...or not setting renew if gateway set. The behavior is indeterminate. You should in fact not fail, and let CAS sort it out.