These were removed from core in https://github.com/discourse/discourse/commit/d2bceff133ac152678a1407d45fea260a0fe8536

This makes sure the saml_request can only insert strings into the HTML
form.

* Support for GlobalSetting.saml_base_url

* Push file with class method...

Co-authored-by: Richard <richard@discoursehosting.com>

- extract group_sync method
- run sync on new accounts
- only add user to groups that are both on the saml payload AND on the
  group list