Tweaks for AAF authentication.

* Make login links go directly to AAF if enabled.
* Make login page show only the AAF login button if enabled.
* Add secret login page /login_local for local (e.g. admin) login.
* Add setting to disable Registration.