Bring RA up to par with SelfService.

 * SAML login
 * Base template
 * Gateway API client