With cnx user

This provides the partial integration of cnx-user. It is only partial because we lack the UX that would allow a user to login via cnx-user. To test this, one would enable 'allow-local-services' on cnx-user (or put it on a different host). Then translate the resulting /valid url to work against rhaptos2.repo by replacing the hostname and port.