Bring RA up to par with SelfService

 * SAML login
 * Base template
 * Gateway API client