origin and external_id columns

Temporary PR to review changes around origin and external_id columns.
Refactor of authz_approval to rely on user_id rather than username. 
If we have successfully authenticated the user marked unknown, we can safely modify this user to have an origin='uaa'.
This will also help us track down users that haven't authenticated since the migration.