Update PEP-2: Add level of abstraction between ACLs and IdPs using user random IDs (URIDs)

[rogerdahl]

Update this PEP to include the features what we built in the Auth UI, and the rationale for them.