Issue #552 Avoid usage count in SSO opt-out check.

Reorganize code to perform authentication beforehand and store reference
to successful Authentication event that can be consulted for SSO opt-out
check afterward.
Merge pull request #692 from serac/552-sso-opt-out

Issue #552 Avoid usage count in SSO opt-out check.