Moved some logic away from SAML related code to a controller related to
Omniauth sign-in.

Changelog: fixed
EE: true