added login_scheme parameter to authenticator

to force the use of given login scheme for login_url and for the (original)
request to which we redirect in case of succesful login
(if the original request is identical to login_url, we redirect to '/'
 in case  of succesful login, to avoid 'looping' 'in' login  screen)