Application SRG cross walk during UX refactor

[aaronlippold]

At some point soon we need to do a quick read-through to see if we have any issues we need to address - session timeout - session lock - account lockout, failed login, errors don't give too much info, etc - that we should fold into the UX refactor which seems to be the best path.

@ejaronne has some reachback on an application checklist we could use as a good starting point from Nate Adam's team.