Canonical SSO provider

Merge proposals dependent on lp://staging/~canonical-isd-hackers/canonical-identity-provider/bug_530271_csrf

  1. bug_530271_csrf
  2. Dependent merge proposals

lp://staging/~canonical-isd-hackers/canonical-identity-provider/bug_530271_csrf has no merge proposals.