Currently GitLab.com Group SAML SSO uses the local part of the
email address to determine the GitLab.com username. This change
will first look for a `username` attribute in the SAML response
and then fall back to the local part of the email address.

Changelog: added
EE: true