Create a page (tentatively "Login handlers") that

1. lists all the handlers we provide ootb (basic, digest, form, ...),
2. gives description of how they work, and
3. explains what form of security they provide
   but with what limitation so that a client can choose which one to configure to be comfortable with the safely level it provides to their on-prem installation.