Add config option to enable / disable Shibboleth login for FE / BE
Set service priority to be higher than that of saltedpasswords

This gives us the opportunity to kill a login attempt of a Shibboleth user using local password (which might have been set by the user).
Always change the password of a Shibboleth user
Improve description of Shibboleth enable configuration options