OpenID SSO support

This allows for making gitlab use *only* a specified OpenID server for
authentication.

I'm sure there are things should be cleaned up, but this does work for
me on my development sever.  I haven't pushed it out on our live server
yet, though. ;-)

Ciao!