Use gateway as choice in openconnect and gateway_url as direct authentication URL.

Rename `--show-list-of-gateways` to `--list-gateways` and fix it (sometimes gateways can be listed only after authentication).
Reorder configuration file to be more sane.

gp-okta.conf

@@ -6,6 +6,10 @@ vpn_url = https://vpn.example.com
 okta_url = https://example.okta.com
 #okta_url_cert = okta_url.cert
 
+#gateway = NEWYORK1-GW                 # optional gateway name to choose
+#gateway_url = https://ny1-gw.my.lan   # optional gateway url to authenticate
+another_dance = 0                      # second round of authentication
+
 username = myuser
 password = mypass
 #client_cert = path-to-myusers-client-cert-as-unencrypted-pem-file.pem
@@ -16,12 +20,10 @@ sms.okta = 0
 #totp.google = ABCDEFGHIJKLMNOP
 #totp.symantec = ABCDEFGHIJKLMNOP
 
-gateway = Manual ny1-gw.example.com   # optional hardcoded gateway
 
 #openconnect_cmd = sudo openconnect
 #openconnect_certs = path-to-a-writeable-filename-in-which-the-script-will-collect-all-involved-server-certs-if-not-set-a-temp-file-is-used-instead
 openconnect_args =                    # optional arguments to openconnect
 execute = 0                           # execute openconnect command
-another_dance = 0                     # second round of authentication required
 bug.nl = 0                            # newline work-around for openconnect
 bug.username = 0                      # username work-around for openconnect