Cleanup for SignInManager

Add cancellation tokens/async suffixes
Add SignInOptions(Will enable CanSignIn in a seperate PR)
I see, but they need to know exactly when to do that. Feels like a very ad-hoc pattern for configuring the behavior that adds to the standard ones in Options and DI.