Adds a check to ProjectPolicy to ensure that there is an active
SAML session when SSO is being enforced.

Builds upon changes in GroupPolicy, but because so many policies
delegate to ProjectPolicy there is much more impact from this MR.