Initial sso and rb restore workaround

2 patches in this request.  One patch is initial framework for SSO support required for source2.  This still needs to be debugged and finished, but this is a good starting point to get in place.  The other patch changes a hard error into a warning for a render buffer restore issue that I was hitting on a Dota2 trace.