OpenID SSO support

This allows for making gitlab use *only* a specified OpenID server
for authentication.