Add OIDC as a login method

closes #64

This adds OIDC as a login method, replacing sso.debian.org TLS authentication. Settings for Salsa are included in the Debian profile.

The SSO implementation is borrowed from Debusine.

To login there is a new "Login with Salsa" link on the login page. Username/password login is still disabled for DDs.