ajax-ify the call to perform identity mapping (including errors)
look up CN url for portal servlet instead of hardcoding it.
include CILogon link and more explanation about what is going on with the mapping.
correctly check that user is logged into metacat before proceeding
draft of legacy-to-d1 account mapping interface