DCJ-659: Use ECM instead of Shibboleth for eRA Commons Authentication

[rushtong]

WIP

Addresses

Addresses https://broadworkbench.atlassian.net/browse/DCJ-659

Summary

Migrate eRA Commons authentication to use ECM instead of Shibboleth

TODO

There are a number of missing pieces yet to be fleshed out.

• Our duos domains are not whitelisted in ECM
• We need to pass an additional redirectTo parameter to ECM for the auth url
• There are no test accounts in the non-prod NIH system which means we can't test this outside of production
• It might be necessary to migrate away from using era commons info in our users table

---

Have you read Terra's Contributing Guide lately? If not, do that first.

• Label PR with a Jira ticket number and include a link to the ticket
• Label PR with a security risk modifier [no, low, medium, high]
• PR describes scope of changes
• Get a minimum of one thumbs worth of review, preferably two if enough team members are available
• Get PO sign-off for all non-trivial UI or workflow changes
• Verify all tests go green
• Test this change deployed correctly and works on dev environment after deployment