add user identity provisioning

@liggitt This builds on top of https://github.com/openshift/origin/pull/334, so I'll rebase it again once yours goes in, but I'm still looking for feedback.
@mfojtik Hey.  A lot of your comments are about https://github.com/openshift/origin/pull/334.  I'll fix all the comments in my commit and forward the rest to Jordan.