Implement authenticate at Staff/User authentication level

This allows SSO backends to ingore authenticate method
Add `user_id` to %ticket_thread at install time