- updated the changelog with the changes (#140)

- adding an extra option to enable the login handler, by default its disabled now
- ensuring the when enabling and we have a client secret, the request must come from localhost
- wrapping the code in a anonymouse method to reduce the repetitve logging statements
- added two test to check the login handler enable options
- added the http as a constant to fix the govetting