Set up openid-selector to replace standard OCW openid form
Remove secret_token initializer and set up linking on deploy

(Also, generated a new token that will not be checked in to git)