Kerberos SSO authentication

Implements basic kerberos SSO authentication.
This has moved to check-realms and should be removed here.