sso integrations (#822)

* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config

util/Setup/Templates/NginxConfig.hbs

@@ -104,6 +104,10 @@ server {
     proxy_pass http://identity:5000/;
   }
 
+  location /sso/ {
+    proxy_pass http://sso:5000/;
+  }
+
   location /icons/ {
     proxy_pass http://icons:5000/;
   }