Identity management on naic-monitor

[lars-t-hansen]

From Buzh, regarding login to naic-monitor:

any chance of making that work with OIDC? would be cool if staff got access automatically
...
i'm not well versed in this, but from what I see in Ondemand it seems fairly straight forward
to use mod_openidc in apache (so presumably it's no more complicated in nginx). if the
browser hasn't got the oidc token already, it's redirected to the login page, then after auth
they're redirected back, and then your app can pick up the username, group memberships
and so on. which means you could f.ex grant admin access for ec01-fox-admins members

Also see #308, very relevant for this.