Clarify `/auth/login/:provider` usage

[phazonoverload]

Describe the Improvement

Some users think they can make a POST to /auth/login/:provider where the provider was SAML, but the route should only work for local and ldap drivers.

This hsould be made more clear throughout the authentication reference.