controllers shouldn't inherit ApplicationController

before this change, things in an app's ApplicationController can affect the gds-sso controllers.