Issue9

Moved the setting of forced auth and passive to constructor of the LoginHandler rather than per request. Updated unit tests
CAS always supports renew/gateway. The handler should assume that implicitly. It would be indeed odd if the configuration allowed you to say "CAS server does not support renew".