Refactor sign in via Touchstone/Shibboleth

Only handle sign-in via Touchstone in custom sessions controller in a
`before_action` callback.

Addresses #18