look up CN url for portal servlet instead of hardcoding it.
include CILogon link and more explanation about what is going on with the mapping.
correctly check that user is logged into metacat before proceeding
use null session for now
draft of legacy-to-d1 account mapping interface