NEW Use BackURL for login, provide logged in URL static
NEW Specify change password URL
NEW Allow auth_source to be overridden on demand