Add a new endpoint /accounts/{id}/external.ids which will return a
list of the external IDs for the given account. It is only allowed
to get this list for a user's own account.
To determine whether or not the user can delete an external ID, we
need to know if that ID was used to log into the current session.
The WebSession is not available outside of gerrit-httpd, so pass the
external ID through a property on the current user.
Change-Id: Iab7ef2ffa06c3a8d9f22472308051b4b73668f82
0748e7441d