Check that SAML identity linking validates the origin of the request See merge request gitlab/gitlabhq!3376