Avoid race when clicking the login button in SSL form (#1826)

See merge request lemonldap-ng/lemonldap-ng!82

Use user skin in loadTemplate (Fixes: #1828)

See merge request lemonldap-ng/lemonldap-ng!83

service= redirect URL is not checked when logging out from CAS, to avoid
insecure redirect attacks. The verification is only made if CAS access
control is enabled.

In order for this to work in common cases (applications redirects to an
unprotected page after logout), we add CAS App domains to the list of
globally trusted domains.

If your application wants to redirect to a third-party domain, it needs
to be added to LLNG's trustedDomains

Add authenticated routes to 2FA for session upgrade (#1822)

See merge request lemonldap-ng/lemonldap-ng!80