clean up unused getter/setter
look up by username instead of subject
fixed misleading error message
added randomized subs to demo users
id token now uses userinfo's sub
userinfo endpoint now uses OAuth2Authentication exclusively

(which is all it was really doing before)
removed old form value from fetcher
services shouldn't be transactional
interceptor shouldn't ever overwrite stuff from the base model
added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.

temporary implementation of pairwise identifiers in place
need to check the sector identifier at some point
added pairwise identifier service and repository
fixed comparison order to be null safe

cleaned up type check
added equality checks to data model objects
added unit test for default userinfo service (with pairwise checks)
calculate pairwise based on redirect uri rather than client id
added unit test for uuid service
moved subject type and sector identifier controls to the 'access' tab
let user know that the client is using a pairwise identifier on approval
added phone-number verified, addresses #505

affects #455