Accessing site settings on boot meant changes were not reflected until the server was restarted, and the plugin was not multi-site compatible. This commit uses the same convention used in other auth providers to access the site setting during the web request.