Revisit scope/subscope lookups in openathens logins

In the above change, we're making two calls to solr in the case that the first call got more than one hit.

But since the first call already gets us all the information we need, we can remove the second call and replace it with a loop through those hits looking for the institution we want (the institution that has a scope but doesn't have a subscope).