* if local login is disabled and there is only one OAuth2 remote app
  defined, we redirect straight to that remote app's login page