Wiring up first attempt event

[Sgtpluck]

🎫 Ticket

Link to the relevant ticket:
154

🛠 Summary of changes

This change wires in the first attempt event to be stored in Redis. This code:

• Adds an attempts_api_tracker object in the applications controller
• Adds a way to access the attempts_api_session_id from the session object
• wires in a call to the email_and_password_auth event

I tested it locally using the OIDC sinatra sample app. I want to add a view there to make it easy to see events as they are generated/delete them

[mitchellhenke]

A couple minor suggestions, but looks good!