Issue9

Moved the setting of forced auth and passive to constructor of the LoginHandler rather than per request. Updated unit tests
I'm not sure I understand the comment. The settings for forced auth and for passive have to have a default value. I simply commented that the default is going to be false - you have to explicitly turn them on.