Save user retrieved from callback if user doesn't exist
Added initial picketlink integration for simple-auth
Added auth for idb rest endpoints and admin
Secured IdB rest endpoints and added login to admin app
Allow root user to set application key on creation, change secret/owner of applications, and list all applications
Hide page contents if an error occurs, for example if user is forbidden
Removed CDI injections - only remaining is IdentityProvider which is next
Fixed default callback for system application
Use proper secret for system application