adding github and orcid as authentication options. Closes #196
strip jsessionid when normalizing url