Moves the saml callback code to a separate route

Following the example of login.js

TODO: Investigate using just login.js both for local and saml logins