An existing licensee can log in

[isabeleliassen]

• separate cognito user pool is stood up for provider users
• configure with app client for UI to authenticate (mostly copy from staff login)
• frontend needs client ID for user pool and login URL
• user pool configuration must restrict which attributes a user can modify (can modify given name, family name, email)
• deliverable: provider successfully logged in