Minor improvements

- Don't use django auth framework
- Store authenticator_qr_nonce in redis instead of in db
- Fixed casperjs tests
- Don't add SSO target for authenticate_with_emergency
- Show sign out reason when signing in (password expired/changed)
- Cache emergency code validity
- Allow downloading location data as KML
- Show meaningful error messages when trying to download emergency codes
  twice