Issue9

Moved the setting of forced auth and passive to constructor of the LoginHandler rather than per request. Updated unit tests
The default should always be true.

And there is no need to provide settings for these flags for the idp. They should be set to true without any other configuration. The ability to turn on/off support for passive and forcedAuthn is not needed, specially for forcedAuthn because the shib idp will always use the authentication instant when receives the principal back from CAS. So in some ways, it is always doing forced authn.