FEATURE: SSO--only ask to associate apps once #431
Description
1] When a given user says 'yes' to associating an SSO app with Portal, remember the tuple of user and app.
2] Have a setting somewhere in Portal that allows the association to be broken per user.
Comparison: any Facebook-associated SSO.