add Entity verifier class, update migration script to not use binding for ACS/SSO
major restructuring