in allowed domains, allow unlinked sso logins

[barna-isaac]

Still a work in progress

---

Pull Request Check List

• Unit Tests & Regression Tests Added (Optional)
• Removed Unnecessary Logs/System.Outs/Comments/TODOs
• Added enough Logging to monitor expected behaviour change
• Security - Injection - everything run by an interpreter (SQL, OS...) is either validated or escaped
• Security - Data Exposure - PII is not stored or sent unencrypted
• Security - Data Exposure - Test any altered or created endpoints using swagger
• Security - Access Control - Check authorisation on every new endpoint
• Security - New dependency - configured sensibly not relying on defaults
• Security - New dependency - Searched for any know vulnerabilities
• Security - New dependency - Signed up team to mailing list
• Security - New dependency - Added to dependency list
• DB schema changes - postgres-rutherford-create-script updated
• DB schema changes - upgrade script created matching create script
• Updated Release Procedure & Documentation (& Considered Implications to Previous Versions)
• Peer-Reviewed