Fixed support for HAS "opt out" model in SSO_default.sh.
Fixed bug where triggers did not work as expected of 'none' was specified
for the SSO group, as needed to support the "Opt out" model for the Helix
Authentication extension.
Fixed doc issue to prevent accidental misconfiguration of pasting in
literal values in the sample.