Identity Provider

Add an identity provider interface to state and an implementation for agents. User, Unit and Machine tags use the AgentIdentityProvider to authenticate.
Yeah, this definitely isn't an *Agent*IdentityProvider if it handles users.