Fix JavaScript error on BE login page due to mixed content refusal
Avoid interference with rsaauth by increasing priority of our service
Make "alwaysFetchUser" a configuration setting