Added code to make server less hack proof

1) social login actions handled only for internal redirect
2) default Login controller auth is disabled