Allow User to authenticate with email/password
wip sketch a CertificateSignerV1 shim
Remove password auth stuff--we aren't doing that
Remove credential-related stuff from shim