Use the public profile instead of reading their private profile.

This means using the AUTHENTICATE scope instead of the READ_PROFILE scope, which produces a different message from ORCID. Once the user has logged in, we know which profile to read.

Change method names, status constants, etc, from AUTH_READ_PROFILE to AUTH_AUTHENTICATE, etc.