Login, logout and callback handler paths should be configurable.