port externalsettings infrastructure from g suite authenticator

This is a port of the changes introduced by [1] which allow external settings to be loaded from URLs, environment variables or the local filesystem.

[1] https://gitlab.developers.cam.ac.uk/uis/devops/gsuite/g-suite-authenticator/-/merge_requests/2

Closes #48 (closed)