Deprecate Shibboleth and use OAuth instead

[shortland]

[shortland]

Use the OAuth library Paul found. It's in the apps/oauth/ directory.

Addionally, check if there's a way to only allow google attributed .edu emails?
(How will a person from ...@gmail.com be able to view the works of someone from ...@stonybrook.edu? (right now they can - but in the future we'd separate affiliations (universities) from eachother.