Retire AU IDP Smoke

This temporary AU service signs in against Identity Platform, validates the returned ID token server-side, and accepts only Retire + AU users.