Changing tenant host does not refresh authentication provider configurations that are dependent on tenant host

The result is that callbacks for google apps, twitter and probably more redirecting to the wrong host.

Either the host should always be pulled on the fly (potentially not possible since that get configured into connect), or we need to cascade tenant updates to also refresh their configurations.