cleanup: only do what is needed

[jrchamp]

• remove a line of unreachable code (and add the appropriate warning suppression)
• if logged in, skip looking up the auto login option
• if not logged in, only check for an active session if auto login is enabled
• skip the login form preparation logic if we do not have any IDPs that would use the prepared data