add sso support for concord portal

This still has a few flaws:
- no tests
- does not handle the case of a email that has already been taken
- does not support auto login given a particular link