[SessionAuth] Configuration Options

Refs #106, make the URLs and parameters used by SessionAuth configurable.