User ids are now generated from the AAF's eduPersonTargetedId and hashed
using SHA-256 - this satisfies the requirement that the ID be unique and
persistent, and gets us a value which is safe to use as a directory name.

Changed the behaviour of Osiris::User and working directories.  It used to
create the working dir as soon as a user logged in: it now waits until the
user starts a job.