Morpho

Rather than checking session-based login status, Morpho should check for a) existence of client certificate, b) validity of certificate, including expiration and probably issuer.
We can display the subject for the currently-found client certificate.
Right now we will just assume the default CILogon location, but in the future each profile should have its own copy of a client certificate.