Add option to limit possible login services to a single service

This pull request addresses issues #10 and #8.
Instead of using the String "AllowAll" an empty default might be more sensible.