Restricted gapps domain support

Here is support for restricting the Google OpenID support to particular domains. It adds two new configuration properties:

    sonar.openid.google.domain=lashpoint.com
    # optional, defaults to the below value
    sonar.openid.google.endpoint=https://www.google.com/accounts/o8/site-xrds?hd=