Mechanism to remotely trigger deletion of any on-device app data

[rowanseymour]

If an admin removes a surveyor user from their org, then next time that user authenticates, it would trigger a removal of all stored data for that org. Would require storing something on the RP side so we can differentiate between an intentional wipe, and a regular authentication failure.