This will allow Group SAML to be used for signing in to GitLab.com
Initially this will be behind the feature flag:
"group_saml_allows_sign_in_to_gitlab" so we can roll it out per group.

Implements Auth::GroupSaml::User to process callback when signed out.
Updates Groups::OmniauthCallbacksController to handle more complicated
redirect flows.