don't export default config

[davidism]

Currently we store default values for app config and extension attributes in the flask_login.config module. Some of those values are exported from __init__.py. Those exports and defaults don't mean anything, they can't be changed at that level. Deprecate them and keep default config in class attributes and init_app only.