move lti auth to filter
move lti launch to own action
add get or create user method
add spec for lti launch action
move box oauth url gen to box class
add box oauth2 support