Add has_trusted_authentication? to user
Add omniauth pam backend. Similar to LDAP.