Bump gds-sso to 9.4.0, pick up User specs

This reduces the risk of refactorings breaking the GDS SSO integration
when the `User` class is refactored or `gds-sso` is bumped.