scorecard authentication

[randytpierce]

We need to implement some sort of authentication.
Please refer to issue #795

Google authentication - is easy to implement in the code but difficult to maintain in googles developer API and also problematic with accessing the API from inside GSL networks.

OAuth - has similar issues as google authentication

Self maintained passwords and accounts - are certainly doable, but yuch! who would do the maintenance for all the forgotten passwords and stuff? I don't want this.

This leaves NOAA ICAM's Single Sign-On (SSO) service. https://sites.google.com/a/noaa.gov/icam/3-sso/sso-primer#h.p_ID_108

By way of introduction, NOAA ICAM's Single Sign-On (SSO) service essentially takes the onus off of your application in terms of authentication.

I am leaning towards this. It would only authorize people with a noaa account and we need to decide if that is appropriate. We do have examples available of python implementations but I need to see if any exist for javascript. Otherwise we just do it ourselves.